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Companies Take Divergent 
Paths With Mainframe 


One IT department embraces it; another decides to abandon it 


BY PATRICK THIBODEAU 
Baldor Electric Co. and Welch 
Foods Inc. have much in com- 
mon. Both are growing, mid- 
size companies with similar- 
size IT departments. 


| dor has consolidated its hard- 
ware to an IBM z990 running 
Linux that hosts its SAP ERP 
applications. The company, 
which makes electric motors, 
oved off IBM pSeries 


ize I" " mov Se 
Each uses packaged ERP ayia servers running AIX 


applications and is run 
by IT managers who 
want complete align- 
ment with the business. 
But when it comes to the 
hardware running these sys- 
tems, the companies are polar 
opposites. 

Fort Smith, Ark.-based Bal- 


and is planning to 
switch applications on 
its Intel servers to ap- 
plications that run on 
the mainframe, includ- 
ing moving a Windows-based 
mail server to Lotus Domino. 
Welch Foods, a Concord, 
Mass.-based juice, jam and 


Open-Source Virtualization 
Beckons Users at LinuxWorld 


New Xen release draws attention at conference 





BY CAROL SLIWA 
SAN FRANCISCO 


| The upcoming 3.0 version 


of the open-source Xen virtual 
machine technology — which 
Linux World, page 14 
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The overflow crowd that 
packed the opening session on 
virtualization at the Linux- 
World Conference & Expo here 
last week showed that the soft- 
ware holds as much allure for bath 
open-source devotees as it does > teen rye 
for users of Windows servers. | f f 
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jelly producer, is moving from 
a System 390 IBM mainframe 
as well as an IBM midrange 


| AS/A400 (now the iSeries) run- 
| ning a mix of applications to 


an Oracle ERP system that 
will run on Intel-based Linux 


} servers. 


Mainframe, page 49 


New Ene 
Bill lena 


Cybersecurity 


Power company tech 
| units must meet a 
| host of new standards 


| BY THOMAS HOFFMAN 
| The new energy bill signed 


into law by President Bush 
last week is expected to have 
a significant impact on IT 
departments at power compa- 


| nies. IT executives and ex- 


perts noted that it allows fed- 
eral enforcement of upcoming 
cybersecurity standards. 
Under the new law, the Fed- 
eral Energy Regulatory Com- 
mission has the authority to 
establish a national electric 
reliability organization with 
the power to oversee and au- 
dit reliability standards. 
Instead of developing its 
own standards, the FERC 
plans to adopt those set by the 
North American Electric Reli- 
Energy Bill, page 49 


KNOWLEDGE CENTER 


OF APPLICATION DEVELOPMENT 


Developers are facing three big challenges: 
3 Adapting to service-oriented architectures and code reuse. 
® Collaborating in globally dispersed teams. 


© Responding to numerous demands from regulators, 
auditors, testers and business managers. 


Are you ready? This special report, beginning on page 33, 
offers strategies for coping with these megatrends. 








TIME FOR A CHANGE 
SCO Group CEO Darl McBride says he’s ready 
for an end to his company’s legal battles. PAGE 6 


UNCERTAIN INTENT 
Microsoft is coy about its plans for a system that 
finds Web sites hosting malicious code. PAGE 7 
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Beckons Users at LinuxWorld 


New Xen release draws attention at conference 
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73% of the FORTUNE 100° and 76% of the 
European 100 compared business collaboration providers 
and came to a single conclusion. 
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intel Set to Unveil 
New Architecture 


Intel Corp. at its fall developer fo- 
rum next week plans to introduce 
a new architecture for building its 
chips. In his keynote, CEO Paul 
Otellini is set to announce the 
“next-generation architecture,” 
which will be completed in the 
second half of 2006. The move 
appears to signal the end of the 
NetBurst architecture, the foun- 
dation of the Pentium 4 and Xeon 
chips for the past five years. 


Microsoft to Release 
Service Pack Again 


Microsoft Corp. has confirmed 
plans to re-release Update Roll- 
up 1 for Windows 2000 Service 
Pack 4 because of several prob- 
lems users are having with the 
current version. The rollup has 
been downloaded several million 
times since its release on June 28, 
but some users are reporting 
problems connecting to servers 
running Citrix and compatibility 
issues with third-party security 
software. 


Dell Results Fall 
Short of Plans 


Dell Inc. fell short of analyst esti- 
mates for second-quarter revenue, 
citing a decrease in average selling 
prices for its products. 


DELL BY THE NUMBERS 
REESE PROFIT 


ce 


Amazon Settles 
Patent Lawsuit 


Amazon.com Inc. will pay out 

$40 million to Soverain Software 
LLC to settle two lawsuits alleging 
patent infringement, the online 
giant revealed in a filing last week 
with the U.S. Securities and Ex- 
change Commission. Amazon said 
it will make a one-time payment 
of $40 million to Soverain, a 
Chicago-based e-commerce com- 
pany, in the third quarter of 2005. 
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NEWS 


M Releases Open 


Fifteen vendors join open-source move 





BY HEATHER HAVENSTEIN 
BM LAST WEEK unveiled 
open-source technology 
designed so companies 
can apply analytics to call 

center logs, warranty claims, 


| technician notes and other 
| unstructured data. 


IBM’s Unstructured Infor- 
mation Management Architec- 


| ture (UIMA) will help compa- 
| nies corral elusive unstructured 


data contained in documents, 
e-mails, Web sites and video 
for inclusion in their business 
intelligence and knowledge 
management efforts, users 


| said. The UIMA framework 


provides standard interfaces 
to let corporate developers or 
IT vendors easily add unstruc- 
tured information analytics to 


| applications, IBM said. 


In conjunction with IBM’s 


| announcement, 15 vendors, 


including SAS Institute Inc., 
Cognos Inc., ClearForest Corp. 
and Attensity Corp., last week 
pledged to support UIMA in 
their products. IBM also intro- 


| duced a product called IBM 


WebSphere Information Inte- 
grator OmniFind Edition, 
which is based on UIMA. 


Extending Investments 
According to Tom Welke, vice 
president of North American 
operations at Whirlpool Corp., 
using UIMA as a standard in- 
terface will allow the Benton 
Harbor, Mich.-based company 
to extend its existing invest- 
ments in text analytics to oth- 
er areas. 

Whirlpool has been using 
software from Attensity for 
the past three years to pluck 
unstructured data from the 
records generated from the 
400,000 customer calls it logs 
every month in its call center. 
With UIMA, Welke said he 
hopes to be able to take that 
analysis and send it back to 
the call center in real time. 

Regulatory DataCorp Inter- 
national LLC is deploying 





ClearForest’s Text Analytics 
Suite, which is compliant with 
UIMA, to analyze thousands 
of sources of unstructured 
data daily, including media ar- 
ticles, government reports and 
Web sites, to add information 
to its Global Regulatory Infor- 


mation Database. The compa- 


ny was formed by 20 banks 
and financial services firms, 
such as Goldman Sachs & Co., 
Merrill Lynch & Co. and Citi- 
group Inc. It uses the database 
to help these companies 
lessen the risks of money 
laundering, fraud and terrorist 
financing, said Bob Catucci, 


Analytics Interface 


president and CEO of New 
York-based Regulatory 
DataCorp. 

Before using the ClearForest 
tools, company employees 
would manually search for 
information. 

“If one of these terrorists 
was able to use your systems 
to transfer funds ... the gov- 
ernment will be asking what 
you are doing to protect 
yourself,” Catucci said. “You 
couldn’t do this with an army 
of people reading articles.” 


at Delphi Group in Boston, 
said companies traditionally 
have been writing one-off 
interfaces to incorporate 





Hadley Reynolds, an analyst | 


www.computerworld.com 


Bie USMC) 
Unstructured Data 


IBM’s Unstructured Infor- 
mation Management Archi- 
tecture involved more than 
elm (cr leome) Mestre eel as) 


« IBM received support 
for UIMA from the Defense 
Department’s Defense 
Advanced Research Projects 
Yee 

IBM plans to make UIMA 
available through Source- 
Cee M a aem UR Re mL) 
Nirmala NCU Um Cel g 
free at the company’s Alpha- 
Works Web site. 


unstructured data into their 
analytic efforts. 

UIMA is designed to let 
companies use the interface 
standard once to link unstruc- 
tured data into multiple appli- 
cations, he added. @ 56151 





SCO CEO Talks About 
IBM Lawsuit, Plans 


BY TODD R. WEISS 

LAS VEGAS 

The critics have been harsh on 
The SCO Group Inc. since it 
claimed ownership of pieces of 
Linux in recent years via law- 
suits and threatened legal ac- 
tion. Darl McBride, president 
and CEO of SCO, talked with 
Computerworld during 

the SCO Forum here last 

week about the state of 

SCO and about its fu- 

ture — whether it wins 

or loses its legal battles. 


Did you expect that more 
business users of Linux 

would license Unix code 

from the SCOsource intellectual 
property licensing group following 
the lawsuits? The SCOsource 
licensing deals were originally 
not created by us but from re- 
quests by customers. They 
didn’t want to wait for the 
conclusion of the legal battles, 
and they wanted to use Linux 
with SCO Unix licenses. We 
had some initial takers. People 
started signing up until other 
companies said, “We will cov- 


er you if SCO ultimately wins 
its court fight.” It’s kind of 
been an interesting scenario. 
We're just not pursuing it any- 
more. We just don’t have time 
to do everything. Let’s get our 
courtroom victories, and then 
| we'll re-evaluate the situation. 


What is SCO’s business 
strategy for the period be- 
fore the IBM case goes to 
trial in February 2007? 
We want to be the lead- 
ers in agile computing 
by 2010. Agile comput- 
ing is where you can 
take your business ap- 
plications with you 
wherever you are, on what- 
ever device you have. 

The last 25 years was about 
business applications. The 
next 25 years will be about 
business applications, but on 
new devices. It’s technology 
we had. We're building on it. 


Since you filed the lawsuits, crit- 
ics have been saying that SCO has 
become a company of IP rights 
and is no longer a products com- 








pany. How do you respond to that 
criticism? The legal-fee caps 
placed on our legal expenses 
earlier allow us now to focus 
on our products. Had we not 
had the caps on the fees, the 
company might not even be 
here in the future because it 
would continue to have to pay 
out high legal expenses. 


What happens to SCO if it wins its 
case against IBM, and what hap- 
pens if it loses? I thought in the 
past that if we lost, we were 
done. But I’ve totally changed 
my view on that. If we lose, we 
still have the start-up tech- 
nologies with brand reach 
around the world. If we win, 
you pour fire on that mega- 
start-up, and it just gets hotter. 
If we win, I don’t think other 
lawsuits will be necessary. 


That said, what is the future of 
SCO? We want to backfill so 
our technologies are as big as 
our brand. We think two years 
from now is the right time for 
the next SCO OpenServer up- 
date. We've got a lot of things 
bubbling up. I like our chances 
far better now, obviously, 
more than three years ago. I 
like our chances now not just 
in the courtroom, but in the 
marketplace. @ 56143 
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‘HoneyMonkey’ Effort Could Presage URL Filtering Bid | 


But unclear if Microsoft research goal in 
the long term is new products or lawsuits 





BY JAIKUMAR VIJAYAN 
A Microsoft Corp. research 
effort to detect and analyze 
Web sites that host malicious 
code could enable the compa- 
ny to one day offer enterprises 
the same capabilities vendors 
of URL filtering products 
have been pitching for some 
time now. 

But for now, at least, it re- 
mains unclear whether this 
is the direction Microsoft is 
headed with its research ef- 
fort, users and analysts said 
this week. 

The company last week re- 





leased a report summarizing 
the first month of testing of its 
Strider HoneyMonkey Exploit 
Detection System. The ques- 
tion is whether Microsoft 
plans to use its research to sue 
malicious Web site operations 
“out of existence, or whether 
they plan to get into the con- 
tent-filtering business,” said 
Eric Beasley, senior network 
manager at Baker Hill Corp., a 
Carmel, Ind.-based application 
services provider. 

“At first glance, it looks like 
they are wanting to get into 
the content-filtering space” 


| like other vendors, Beasley 

| said. The information gath- 

| ered by the HoneyMonkey 

| network will allow Microsoft 
to build lists of malicious 
URLs that companies can 
block employees from access- 
ing, he said. 

Vendors such as Websense 
Inc., Secure Computing Corp. 
and Surf Control USA, for in- 
stance, already sell such URL 
filtering products based on 
similar lists. 


Defensive Effort 


Microsoft launched the sys- 
tem as part of a bid to identify 
| and head off attacks that use 
Web servers to exploit un- 
patched browser vulnerabili- 





ties and install malware on 
compromised PCs, said Yi- 
Min Wang, group manager of 


| the company’s Cybersecurity 
| and Systems Management 





Research Group. 
The system uses an automat- 


| ed network of HoneyMonkey 


systems to patrol the Web for 


| sites that exploit browser vul- 
| nerabilities [QuickLink 56122]. 


Each HoneyMonkey on the 


network is a computer or virtu- | 
al PC that actively mimics the 


actions of a user surfing the 

Web, according to Microsoft. 
Some of the systems on 

the network run fully patched 

browsers. Other systems run 

partially patched browsers, 

and the rest use browsers that 





IT Uses Web Services to Preserve Data 


Turns to tools to 
help modernize 
aging systems 


BY HEATHER HAVENSTEIN 
Corporate IT operations 

are quickly ramping up Web 
services projects to preserve 
existing investments in main- 
frames and other legacy sys- 
tems by unlocking their data 
for use in new Web-based 
applications. 

For example, the 17th Judi- 
cial Court of Florida is build- 
ing a real-time case manage- 
ment system based on Web 
services that’s expected to be 
in production this fall. 

The new system will use 
Shadow z/Events event man- 
agement tools from Neon Sys- 
tems Inc. along with the Web 
services. 

The Neon tools will reside 
on the clerk of the court’s 
VSAM mainframe and juvenile 
and court administration data- 
bases to “listen” for new data 
updates, said Les Pearson, 
systems and programming 
manager with the Judicial 
Information Systems depart- 
ment at the Fort Lauderdale- 
based court. 

These changes will be 
reflected in a real-time data 





warehouse that can be ac- 
cessed by 400 to 500 case 
managers and other judicial 
personnel, Pearson said. 

American Automobile 
Association Carolinas, mean- 
while, is already planning to 
significantly expand the use of 
its 4-month-old paperless pro- 
cessing system that incorpo- 
rates Web services to expose 
AS/400-based insurance poli- 
cy and claims data to a new 
Web-based application. 

Harry Johns, manager of in- 
surance information technol- 
ogy at the Charlotte, N.C.- 
based company, said that over 
the next six to eight months 
the system will be expanded 
to support thousands of work- 
ers compared with the hun- 
dreds who use it now. 

That system was imple- 
mented in April, and AAA 
Carolinas estimates that since 
then it has saved $20,000 that 
it would have spent to store 


paper records. 


Using IBM WebSphere inte- 
gration middleware and a doc- 
ument imaging and manage- 
ment Web application from 
RJS Software Systems Inc., 
AAA Carolinas has built a sys- 
tem that eliminates all paper- 
based processing, Johns said 

As a result, the company has 


| NEW PROD 


Service 
m Supports Web services, 
real-time events and SQL 


access for interoperability 
between mainframe and 
distributed systems. 


slashed claims processing and 
new policy sign-up times from 
weeks to hours and has seen a 
60% spike in its customer ac- 
quisition and retention from 
the $100,000 project, Johns 
added. “We're trying to take 
advantage of as much of the 
benefits the AS/400 has to of- 
fer as we can,” he said. The 
new system “reduces the costs 
because we can reuse the ser- 
vices for multiple things.” 
Vendors, meanwhile, are 
updating their tools to help 
enterprises integrate main- 
frame data with service- 
oriented architectures (SOA). 
Sugar Land, Texas-based 
Neon Systems last week rolled 








out a new mainframe enter- 
prise service bus designed to 
work as an “on ramp” for 
mainframe integration using 
Web services. 

AttachmateWRQ began 
shipping Web integration soft- 
ware last month from Kapow 
Technologies with its own 
Verastream host integration 
software. 

Vestmark Inc., which pro- 
vides a hosted platform for fi- 


nancial service asset managers 


and banks to reconcile and up- 
date client accounts, is using 
technology from Attachmate- 
WRQ and Kapow to access 
data and business logic from 
mainframes and other back- 
end systems, said John Lunny, 


vice president and chief oper- 


ating officer of Wakefield, 
Mass.-based Vestmark. 

“It provides us the interface 
we need to get the account 
data,” Lunny said. “Without 
this technology, people would 
have to go to Web sites or go 
to legacy systems to correct 
a trade.” 

Ron Schmelzer, an analyst at 
ZapThink LLC in Waltham, 
Mass., said about 50% of SOA 
initiatives are mainframe- 
based projects because com- 
panies can preserve the main- 
frame but “still have applica- 
tions that are just as agile and 
flexible as anything they could 
build in Java or .Net.” @ 56177 


haven't been patched. 
In its first month of testing, 
the Strider project located 752 

| URLs for Web sites that auto- 
matically infect unpatched 

| Windows XP systems when 
users visit them, Wang said. A 
majority of the URLs belong 

| to pornographic sites, al- 

| though a few also belong to 

| Internet advertising compa- 
nies, shopping sites and 

| search engine companies, 

Wang said. 
Such information allows Mi- 

crosoft to stay on top of new 

| and emerging Internet threats, 

| said Stephen Toulouse, pro- 

| gram manager of Microsoft’s 

| Security Response Center. 

| “We are working with ISPs, 

| law enforcement, customers, 

| etc., to provide data about the 

threats out there,” he said. 
Toulouse didn’t elaborate 

on Microsoft’s future plans for 

using HoneyMonkey. 


| Feeder Project 


| For the moment, HoneyMon- 

| key appears to be a pure re- 

| search effort by Microsoft, 

| said John Pescatore, an analyst 
| at Gartner Inc. But don’t be 

| surprised to see the informa- 

| tion used to “feed future prod- 
; ucts” from the company, 

| he said. 

For instance, the informa- 
tion gathered by the Honey- 
| Monkey network could allow 

the company to build better 
| defenses in its growing suite 
| of antispyware and antivirus 
products, he said. 

“For now, it’s just more re- 
search and data to sift through 
to try and figure out how to 
overcome the failings of the 
Microsoft programming 
groups,” said Russ Cooper, ed- 
| itor of the NTBugtraq mailing 
| list and a senior scientist at 
Cybertrust Inc. in Herndon, 
Va. “I'd be happier if Microsoft 
were making IP addresses and 
DNS names available now for 
every site they identify, with 
| the caveat that the site may 
actually not be malicious.” 


@ 56175 


| PATCH MANAGEMENT 


| 
Microsoft has released additional patches 
for Windows and Internet Explorer 


Quicklink 56179 
www.computerworld.com 
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SSA Buys HR 
Software Maker 


SSA Global Technologies Inc. has 
agreed to acquire Boniva Soft- 
ware Inc., a maker of human re- 
sources management software, 
for an undisclosed sum. The move 
comes just a week after SSA 


agreed to buy CRM software mak- | 


er Epiphany Inc. for $329 million 
[QuickLink 55991]. SSA Global 
said that it will integrate Boniva’s 
technology with its own SSA 
human capital management suite. 


Nortel Earnings, 
Sales Up in Q2 


Nortel Networks Corp.’s earnings 
more than doubled in the second 
quarter as the telecommunica- 
tions equipment company saw 
higher sales of enterprise and 
wireless gear. 


be a 


AOL Buys Wildseed 
For Wireless Unit 


America Online Inc. has acquired 
privately held Wildseed Ltd., a 
maker of Linux-based software 
for mobile devices. Wildseed will 
become a key part of a new wire- 
less unit AOL created to boost its 
mobile services. The new unit will 
also include AOL’s Tegic Commu- 
nications operation, which builds 
technology to simpiity the entry of 
text into mobile devices, and AOL 
Mobile, the company’s mobile ser- 
vices arm. 


Spammer to Pay 
$7M to Microsoft 


Microsoft Corp. has settled a law- 
suit that it filed two years ago 
against Scott Richter, who at one 
time helped distribute more than 
38 billion unsolicited e-mails per 
year. Richter and his online mar- 
keting company, OptinRealBig.- 
com LLC, agreed to pay Microsoft 
$7 million to settle the suit, which 
was filed in December 2003. 
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Money and Who 
Makes It Is... 


. . .a sensitive issue in the open-source community. Ac- 
cording to Mitchell Baker, president of the Mozilla 
Foundation in Mountain View, Calif., “Anytime 
money gets into the picture, people get suspicious.” 
Baker was explaining to an audience of open-source 


developers at 
the O’Reilly 
Open Source 
Convention 
in Portland, 
Ore., earlier 
this month 
why she feels 
her nonprofit 
organization 
needs a for- 
profit sister 
company to promote and 
manage the world’s No. 2 
Internet browser, Firefox. 
The money problem inside 
the open-source world stems 
from the fact that 
most developers who 
contribute to open- 
source projects do so 
for free, while some 
individuals build suc- 
cessful companies 
around those projects 
and profit from them. 
Paul Everitt, execu- 
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tract developers, you can’t 
give off the smell that some- 
one’s going to make a lot of 
money” while leaving the de- 
velopers in the cold. 

Mike Shaver, the Mozilla 
Foundation’s technology 
strategist, says those views 
helped shape the structure 
of the new Mozilla Corp. so 
it would own no assets and, 
despite its for-profit status, 
would be unlikely to earn a 
dime. “Everything we do is 
for the [Mozilla] community,” 
he says. 

Winston Damarillo, CEO of 
Simula Labs LLC, a 
venture capital busi- 
ness that nurtures 
open-source compa- 
nies, acknowledges 
that there’s “a little 
bit” of resentment 
among some open- 
source programmers. 
Damarillo, who re- 
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source 


tive director of the 
Plone Foundation in 
Houston, which pro- 
motes the Plone open-source 
content management soft- 
ware, says, “If you want to at- 
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cently sold open- 
source application 
server firm Gluecode 
Software Inc. in El Segundo, 
Calif., to IBM [QuickLink 
54295], proudly says, “We 





produced a few open-source 
millionaires.” But he stresses 
that his goal is to offer the 
“inner core [of developers] of 
an open-source project to be 
co-founders” of the compa- 
nies that Simula Labs will 


launch. 


Zach Urlocker, vice presi- 
dent of marketing at the lead- 
ing open-source database 
company, MySQL Inc. in Cu- 
pertino, Calif., claims that 
open-source developers “are 
less extremist today.” Still, he 
says it is essential for MySQL 
“to err on the side of over- 
communicating” the compa- 
ny’s goals to developers to 
deflect any resentment that 
the company makes money. 
In addition, says CEO Marten 
Mickos, MySQL pays for key 
pieces of code developed by 
contributors to its database. 
Damarillo argues that people 
in the open-source commu- 


nity have much to offer the IT 


industry. “The biggest loss for 
open-source is if developers 
become salaried employees 
instead of entrepreneurs,” 

he says. 


Open-source code 
can pose legal. . . 

. . headaches for IT depart- 
ments if they don’t carefully 
manage the Byzantine licensing 
requirements. Paul Henderson, 
vice president of marketing at 
Black Duck Software Inc. in 
Waltham, Mass., claims that 
his company’s knowledge 
base includes nearly 600 
different licenses and their 
terms. He says Black Duck’s 
ProtexIP software will ana- 
lyze your code to make sure 
you’re in compliance with the 
various terms demanded by 
these agreements. 

Mark Tolliver, CEO of San 
Francisco-based Palamida 
Inc., which offers a 
competing product 
called IP Amplifi- 
er, Says Open- 
source license 
management tools 
are essential be- 
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cause devel- 
opers slip 
free but li- 
censed code 
from the In- 
ternet into 
corporate 
projects. And, 
he says, IT 
managers in- 
volved in mergers and acqui- 
sitions need a license evalua- 
tion tool to review code to 
ensure that software assets 
they are acquiring meet IT 
policies. Tolliver says that be- 
cause IP Amplifier can scan 
your code, a logical extension 
for IP Amplifier in the future 
will be to also scan for ex- 
port-control compliance and 
security deficiencies. 

A licensed version of Black 
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| Duck’s ProtexIP starts at 


$25,000. An ASP version be- 
gins at $3,000. Palamida’s IP 
Amplifier starts at $5,000 per 


developer. 


Detect external 
reconnaissance... 

. . of your network, then block 
the source. That’s the “simple” 
technique used by ForeScout 
Technologies Inc. in Cuper- 
tino, Calif., says Ray Wiz- 
bowski, senior director of 
market development. Its tools 
detect outsiders who ping de- 
vices, sweep network ports 
and use other hacking tech- 
niques, then they refuse the 
source of those recon efforts 
to reach your network. The 
Aug. 22 release of its Coun- 
terAct 5.0 appliance software 
will be able to determine 
whether endpoint devices ac- 
cessing the network are com- 
pliant with policies regarding 
antivirus software, patches 
and other conditions set by 
IT. Pricing starts at $12,000. 
@ 56129 


ForeScout’s CounterAct security appliance 
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AT DEADLINE 


ETrade Spends 
$700M for Broker 


ETrade Financial Corp. has 
agreed to acquire the U.S.-based 
online brokerage operations of 
Harrisdirect LLC from BMO Fi- 
nancial Group. The $700 million 
acquisition will add approximate- 
ly 430,000 customer accounts 
with about $32 billion in total as- 
sets to the business, according to 
ETrade officials. The transaction 
is expected to close by the end 
of the year, pending regulatory 
approvals. 


Cisco Reports Profit, 
Revenue Increases 


Cisco Systems Inc. reported an 
11% increase in fourth-quarter 
revenue compared with the year- 
earlier figure. Profits also in- 
creased in the quarter. 


CISCO BY THE NUMBERS 


mn 


Former WorldCom 
CFO Gets Five Years 


Former WoridCom Inc. Chief 
Financial Officer Scott Sullivan 
was sentenced to five years 

in prison for his role in engineer- 
ing the $11 billion accounting 
fraud that led to the bankruptcy 
of the telecommunications 
powerhouse. Sullivan last year 
cooperated with prosecutors and 
agreed to plead guilty to fraud, 
conspiracy and filing false finan- 
cial documents. 


omen: 2 aa! 


P CEO to Headline 
New Tech Forum 


In an apparent change of heart, 
Hewlett-Packard Co. CEO Mark 
Hurd will be the keynote speaker 
at the company’s HP Technology 
Forum 2005. Hurd had earlier 
come under criticism for not 
planning to speak at the forum 
[QuickLink 55548] due to a 
scheduling conflict. The forum 
will be held Sept. 12-15 in New 
Orleans. 
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Scottish Police Dump 


Integration needs, 
maintenance costs 


BY JAMES NICCOLAI AND 
TODD R. WEISS 
HE CENTRAL Scot- 
land Police opera- 
tion is removing Sun 
Microsystems Inc.’s 
StarOffice productivity soft- 
ware from about 400 PCs and 
switching to Microsoft Corp.’s 
Office system. Officials cited 
lower maintenance costs and 
the need to interoperate more 
smoothly with other depart- 
ments running Windows. 

The switch is the latest ex- 
ample in Europe of a tussle for 
business between Microsoft 
and open-source software. 

Several European organiza- 
tions, particularly public agen- 
cies, have been adopting or 
experimenting with Linux and 
other open-source products in 
recent years, but the move by 





the Randolphfield, Scotland- 
based police unit shows the 
migrations are not all one way. 

“It’s not really based on any 
ideological argument about 
open-source software; it’s 
based on pure business needs,” 
said David Stirling, head of IT 
for Central Scotland Police. 

The agency is one of eight 
police jurisdictions in Scotland 
and employs about 1,000 offi- 
cers and support staff. It adopt- 
ed StarOffice in 2000 when it 
was short of cash after paying 
for a new crime reporting 
application, Stirling said. 

The police department ex- 
pects to significantly reduce 
its maintenance and adminis- 
tration costs using the Micro- 
soft software, Stirling said. He 
stopped short of saying that 
the total overall cost of owner- 
ship would be lower but esti- 
mated that the Microsoft soft- 
ware would cost no more 
than its previous system and 
offer efficiencies. 





StarOffice for Windows 


44 [The switch to 
Windows] is 
not really based on 
any ideological ar- 
gument about open- 
source software; 

it’s based on pure 
business needs. 


DAVID STIRLING, HEAD OF IT, 
CENTRAL SCOTLAND POLICE 


The agency had retained 
Windows on its desktop PCs 
but ran StarOffice applications 
from a central Sun Unix sys- 
tem and 30 Linux servers in- 
stalled at branch offices. Early 
this year, following a review of 
its infrastructure and a follow- 
up study in March, it decided 
to switch. 

Not all analysts were sur- 
prised by the agency’s deci- 
sion, noting that organizations 
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often change technologies to 
achieve a better fit, but some 
said that such a move may 
indicate Microsoft could be 
returning to favor in Europe. 

A Sun spokesman declined 
comment on the move. 

Laura DiDio, an analyst at 
The Yankee Group in Boston, 
said changing conditions for 
the police department make 
deals like this one understand- 
able. “StarOffice is a great 
package,” she said, but it may 
not have all the collaboration 
and other features needed by 
the police today to help fight 
terrorism electronically. 

Carol Baroudi, an analyst 
at Hurwitz & Associates in 
Waltham, Mass., said the deal 
“is not an insignificant thing” 
because Microsoft has been 
taken to task across much of 
Europe for its high prices as 
many governments have 
moved to open-source appli- 
cations and Linux to save 
money. 

“There’s a very strong open- 
source push in Europe, so to 
win back accounts is no small 
thing,” Baroudi said. @ 56176 


Niccolai is a reporter for the 
IDG News Service. 





China Starts IT Services Push 


BY PATRICK THIBODEAU 
NEW YORK 
All it takes to understand Chi- 
ha’s growing ambitions in the 
offshore market is to watch Jin 
Cao’s slide show of numerous 
large office complexes, too 
many to quickly count, nestled 
in comfortable office parks. 
Multinational companies 
that opt to locate offshore facil- 
ities in these office parks will 
also get access to a wide range 
of government-backed ser- 
vices, including recruitment 
assistance, bilingual schools 
and other support facilities — 
including golf courses. 
According to Cao, U.S.A. di- 
rector of the Dalian Software 
Park in northeastern China, the 
government is developing soft- 
ware parks to serve as centers 
for offshore IT development 
and business process outsourc- 
ing operations. They will also 








China’s IT Strategy 


® Build office parks with close 
ties to educational facilities to 
attract offshore development. 


® implement tax policies that 
encourage investment. 


® Create infrastructure ser- 
vices, both technical and human 
resources, to help firms. 


serve as “captive centers” that 
house offshore facilities owned 
and operated by foreign firms, 
in addition to China’s own off- 
shore companies. 

The push is heavily backed 
by the Chinese government, 
which hopes to lessen its de- 
pendence on foreign technol- 
ogy, develop a domestic tech- 
nology market and drive its 
own brands internationally, 
said attendees at a China IT 





services conference here. 

The event was sponsored by 
the International Executive 
Association in Edison, N.J. 

The emergence of China as 
an offshore destination was 
underscored by Sharon Allen, 
chairman of the board at De- 
loitte & Touche USA LLP, who 
said her firm plans to spend 
$150 million in China in the 
next few years to increase its 
3,300-person workforce there. 
China is “poised to reclaim its 
place at the very top of the in- 
ternational economic ladder,” 
Allen said. 

Much of Deloitte’s invest- 
ment will be spent on training 
and developing its growing 
workforce, Allen said, noting 
that “finding skilled workers 
in many sectors is very diffi- 
cult and becoming expensive.” 

China doesn’t have a big 
share of the international off- 





shore market; the majority 

of its services revenue, 85%, 
comes from the domestic mar- 
ket. International offshore rev- 
enues last year were about 
$600 million, said Walter 
Fang, vice president and chief 
technology officer at Neusoft 
Group Ltd. in Shenyang. 

In contrast, India’s interna- 
tional offshore revenue ex- 
ports were $17.2 billion for the 
12 months that ended March 
31, according to India’s Nation- 
al Association of Software 
Companies in Delhi. 

But Fang predicts expansion 
in China, particularly as the 
nation enters the World Trade 
Organization, hosts the 2008 
Olympics and sees a boost in 
IT spending by the Chinese 
government. 

Part of China’s IT strategy is 
to reduce its dependence on 
foreign IT products and devel- 
op its own brands, said Jamie 
Popkin, an analyst at Gartner 
Inc. @ 56181 





Achieving sustained compliance to protect shareholder value is no small feat — but SAS” Corporate 
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IT Services Firm to 
Expand India Operations 


BANGALORE, INDIA 

ANBAY INTERNATIONAL INC., an 
K: services firm focused on the 

financial services industry, has 
disclosed plans to expand its Indian 
development facilities to accommo- 
date nearly 3,000 more workers by 
next spring. 

Rosemont, IIl.-based Kanbay cur- 
rently employs about 3,800 staffers at 
Indian development centers in Pune, 
Hyderabad and Chennai, said Ray- 
mond Spencer, chairman and CEO. 

Spencer declined to say whether all 
of the new positions 
would be filled by early 
next year, when the 
facilities will be able to 
accommodate 6,500 
workers. 

The company will ex- 
pand in India in propor- 
tion to its revenue 
growth, Spencer said. 

Kanbay currently em- 
ploys about 4,700 staffers 
worldwide, 80% of whom 
work in Indian facilities. 
The company plans to 
retain that percentage as 
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it grows, Spencer said. 

Kanbay is also exploring the possi- 
bility of setting up development cen- 
ters in China, Eastern Europe and 
Latin America, according to Spencer. 
w JOHN RIBEIRO, IDG NEWS SERVICE 


CSC, Telkom Sign Pact 
With African Banks 


JOHANNESBURG, SOUTH AFRICA 
OMPUTER SCIENCES CorRP. (CSC) 
C and Telkom SA Ltd. have signed a 
five-year, $275 million outsourc- 
ing agreement with Nedbank Group 
| Ltd. and Old Mutual SA to build and 
| operate a shared network for the finan- 
cial services companies. 
The deal also includes 
network security and 
help desk support. 
Nedbank and Old Mu- 
tual, both in South Africa, 
are parts of London- 
based Old Mutual Group. 
Nedbank and Old Mu- 
tual officials expect the 
pact to help reduce the 
risk of technology fail- 
ures and let them lever- 
age the buying power of 
two organizations. 
Company officials pre- 








dicted that the two firms will save 


|| about $154 million over the life of the 


pact — $46 million by Old Mutual and 
$108 million by Nedbank. 
mw SAMANTHA PERRY 


| COMPUTING SOUTH AFRICA 


iinet ins Off RFID 
Software Business 


DUSSELDORF, GERMANY 


| UNICH-BASED CHIP MAKER Infi- 
neon Technologies AG has spun 


out a new company to take over | 


its work on developing radio frequen- 

cy identification (RFID) software. 
The new firm, RFiT Solutions 

GmbH, is headed by a group of former 


| Infineon executives. The Graz, Aus- 


tria-based company acquired all of In- 
fineon’s RFID software business, in- 
cluding patents, trademarks and licens- 
es, for an undisclosed price. 

Meanwhile, Infineon said it intends 
to continue to develop, produce and 
market RFID chips and inlays, which 
comprise chips, antennas and the con- 
nections in between. 

RFiT will continue development of 
the Infineon’s You-R OPEN software, 
which can connect companies’ existing 
logistics IT systems to new RFID- 
supported logistics systems and to an 
entire RFID infrastructure of readers, 
PCs and IT networks. @ 56125 
mw JOHN BLAU, IDG NEWS SERVICE 
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Briefly Noted 


Atos Origin SA, a Paris-based IT 
services company, has signed an 
$86 million contract to provide IT 
services to London-based Network 
Rail Ltd., which oversees the U.K.’s 
railway network. The agreement 
calls for Atos Origin to operate the 
train management and planning sys- 
tems that are used to compile Net- 
work Rail’s timetables and monitor 
the location of all trains across the 
nation’s rail network. 


Pacific internet Ltd. in Singapore 
said that Tong Hai Tan resigned as 
CEO last week in order to seek new 
“challenges in his career.” Tan has 
been CEO of the Internet service 
provider since 2001. A search has 
begun for Tan’s replacement, the 
company said. 

m@ SUMNER LEMON, IDG NEWS SERVICE 


Deutsche Telekom AG agreed last 
week to buy Austrian mobile phone 
carrier tele.ring Telekom Service 
GmbH, a division of Bellevue, Wash.- 
based Western Wireless Corp., ina 
$1.6 billion deal. The tele.ring opera- 
tion, with 968,000 customers, will 
be folded into Deutsche Telekom 
subsidiary T-Mobile Austria GmbH, 
Austria’s second-largest operator 
with more than 3 million customers. 
w JOHN BLAU, IDG NEWS SERVICE 


vides them to 60 customers 
in North America. It recently 


Lawson Embraces IBM Stack to Boost Performance 


Is set to release 
updated version of 
infrastructure app 


BY MARC L. SONGINI 
Business applications maker 
Lawson Software Inc. hopes to 
cut the complexity and boost 
the performance of its technol- 
ogy stack with today’s rollout 
of the latest version of its ap- 
plications infrastructure soft- 
ware, Lawson 8.1.0 Technology. 
The new software offers sig- 
nificant enhancements — the 
result of a tight technological 
partnership between Lawson 
and IBM announced in May, 
said Del Dehn, product man- 
ager of Lawson's technology 
product management group. 
For instance, customers will 
be able to standardize their in- 








frastructures around the IBM 
WebSphere Application Serv- 
er Network Deployment and 
the IBM Tivoli Directory 


| Server software products. 


Using the IBM Tivoli Direc- 
tory Server LDAP technology 
and the new Lawson Security 
system, customers can quickly 
create profiles that securely 
assign rules-based roles to end 
users. According to Dehn, that 
will allow companies to easily 
segregate the duties and privi- 
leges of employees and con- 
trol data access. That ability 
could help companies comply 
with the federal Health Insur- 
ance Portability and Account- 
ability Act and the Sarbanes- 
Oxley Act. 

Moreover, operating Law- 
son 8.1.0 Technology with the 
IBM WebSphere application 





server will enable IT staffers 
to boost Lawson’s perfor- 
mance and scalability by run- 
ning the applications over 
multiple servers. Until now, 
scaling the Lawson applica- 
tions required customers to 
invest in more CPUs ona 
single machine, a move that 


could be expensive, said Dehn. 


In addition, the St. Paul, 
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Minn.-based company has 
made the Lawson graphical 
user interface more config- 
urable. For instance, end users 
will be able to configure their 
keyboards to support high- 
speed data entry by reducing 
keystrokes. 


Changing Roles 
A couple of users said they 
wanted the simplicity of im- 
plementing role-based securi- 
ty through IBM technology. 
Prior to this release, Law- 
son’s own proprietary security 
software would let a company 
assign just one role to a given 
user, said Chance Veasey, vice 
president of operations at 
Herndon, Va.-based NetASPx 
Inc. The software service pro- 
vider runs Lawson ERP appli- 
cations internally and pro- 





completed a beta test of Law- 
son 8.1.0 Technology. 

Using the Tivoli LDAP tool, 
any user can now be assigned 
multiple roles without having 
to create separate security 
identifications, a process that 
can be time-consuming, said 
Veasey. The change will make 
it easier to comply with feder- 
al regulations and simplify the 
security process, he said. 

In addition, with Web- 


| Sphere, NetASPx can do load 


balancing among the ma- 
chines running Lawson, elimi- 
nating any single point of fail- 
ure. Until now, customers 
have been unable to scale over 
multiple servers. 

Lawson 8.1.0 is available 
now, and users can install it 
without having to upgrade 
their business applications. 


@ 56156 
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Disaster Notification Tools Get a Boost 


Some firms finding 
nonemergecy uses 
for their systems 


BY LUCAS MEARIAN 

In the aftermath of the Asian 
tsunami late last year and a 
rash of earthquakes off Califor- 
nia’s coast in June, businesses 
and governments are racing to 
roll out more-sophisticated 
electronic messaging systems 
to alert and guide people who 
face possible disaster. 

However, corporate invest- 
ment in these technologies 
need not be restricted to dis- 
aster preparedness. 

Greg Radner, senior vice 
president of corporate execu- 
tive services at Thomson Fi- 
nancial Inc. in New York, said 
his firm has been using a mass 
e-mail service from Envoy- 
WorldWide Inc. in Bedford, 
Mass., for the past three years. 
The system lets Thomson 
send notifications to users of 
its online investor-relations 
services. 

Radner said the e-mail ser- 
vice issues about 8 million 
messages per month through 
any electronic device to users 
who sign up for the service via 
e-mail. The system can also be 
used for business continuity 
should disaster strike. 


Sense of Urgency 
There is a sense of urgency 
among those preparing for the 
unthinkable that’s spurring 
adoption of such technologies. 
By the end of 2007, 75% of 
Global 2,000 companies will 
have emergency notification 
systems for employee commu- 
nication in the event of a crisis 
and as part of disaster recov- 
ery plans, according to a re- 
cent report by Gartner Inc. 

Financial services firms 
have been leading the way in 
alerting employees and cus- 
tomers to industry news and 
earnings and in complying 
with Sarbanes-Oxley Act 
requirements, according to 
Gartner analysts. 

“Some auditors are pushing 
the fact that companies need 
some availability of these ser- 





vices of business continuity 
for SOX compliance,” said Gart- 
ner analyst Roberta J. Witty. 

Gartner analyst Christopher 
Baum said mass-messaging 
technologies can also be used 
as two-way communication 
tools to “help build your re- 
covery process.” 

After the California tem- 
blors, governments started 
purchasing mass-notification 
services at an increasing rate, 





in part because those earth- 
quakes exposed flaws in sever- 
al states’ emergency notifica- 
tion systems, Baum said. 

The June quakes prompted 
tsunami warning centers in 
Hawaii and Alaska to issue 
alerts and advisories up and 
down the Pacific Coast. The 
West Coast & Alaska Tsunami 

/arning Center in Palmer, 
Alaska, issued the first warn- 
ing of the West Coast quakes, 


Be i | 
What to Look for in a Notification Provider 


= Has expertise in your industry (important in regulated industries). 


= Provides tools that are easy for planning and recovery teams to learn. 
= Supplies training, technical support and consulting services. 


= Can export data into and out of its product suite and enterprise applica- 
tions so that administration of the tool is faster and less prone to error. 


® Offers a family of products that enable the tool to be upgraded easily 


as the plan grows. 





from Mexico to Canada, but 
the Pacific Tsunami Warning 
Center in Ewa Beach, Hawaii, 
said there was no tsunami 
watch or warning in effect. 
The conflicting messages and 
jammed phone lines created 
some confusion among state 
and local officials. San Fran- 
cisco officials said they 
learned of the tsunami warn- 
ing on TV, reports stated. 
“These systems could defi- 
nitely use debugging. There 
were several problems noted 
in these last warnings,” said 
Paul Whitmore, chief scientist 
at the West Coast & Alaska 
Tsunami Warning Center. 
Kenneth Murphy, director 
of the state of Oregon’s emer- 
gency management services 
in Salem, said 911 emergency 
communications centers are 
often overcome by calls dur- 
ing a disaster. “We’ve got to 


| have one message that goes 

| out Over one system, no mat- 

| ter whose message it is,” Mur- 
| phy said. 

Murphy said IP technology 

may help with increasing the 
| bandwidth of today’s jammed 
| phone lines. 
Like Murphy, Celeste Cook, 
| director of the Office of Emer- 
gency Management for Santa 
Clara County, Calif., is looking 
for new messaging technology. 
She said her office is about to 

| take bids for a mass-notifica- 

| tion network, thanks to funds 
from the U.S. Department of 
Homeland Security. 

| “The big question is, Where 

| do I want to put my vulnera- 
bility? If you choose to use 
land lines, then your vulnera- 
bility is land lines. If you 
choose the Internet, then 
you’re banking the Internet 

| won't go down,” Cook said. 
“We're going to look at a sys- 

| tem that has the most redun- 


| dancy.” @ 56142 


VMware Offers Code Access to Partners 


Aim is improved 


product integration 


BY PATRICK THIBODEAU 
VMware Inc. last week said it 
wants to give its third-party 
vendors a leg up in developing 
products that work well with 
its virtualization technology 
by allowing them access to its 
source code, in addition to 
pushing for open standards in 
virtualization. 

If the move by the Palo Alto, 
Calif.-based company does re- 
sult in management software 
improvements, that would 
please Ben Thompson, senior 
network engineer and manag- 
er at The Community College 
of Baltimore County in Mary- 
land. IBM is one of the ven- 
dors that will get VMware 
source-code access, and 
Thompson runs IBM Director 
as the management software 
for his IBM BladeCenter, 
which uses VMware ESX 
Server. Thompson said that at 
present, Director “doesn’t 
quite have the detail that one 
would hope for” in providing 





information about the perfor- 
mance of his ESX servers. 

VMware partners will be 
able to access the virtualiza- 
tion software server’s source 
code under a royalty-free li- 
cense. The partners can then 
contribute shared code or cre- 
ate binary modules to help 
with interoperability and inte- 
gration. An architecture board 
will help manage partners’ 
contributions and suggestions. 

To this point, VMware, an 
independent subsidiary of 
EMC Corp., hasn’t given ven- 
dors access to its source code, 
said VMware’s Raghu Raghu- 
ram, senior director of strate- 
gy and market development. 
But with access, a vendor such 
as Cisco Systems Inc. would 
be able to ensure that its 
switches interoperate with 
VMware. 

VMware’s open-standards 
effort will address issues such 
as how an operating system 
talks to the virtualization layer 
and how the virtual machine 
is represented on a disk, said 
Raghuram. The management 
interfaces are already pub- 





lished and available, he said. 
Another VMware user, Tony 
Adams, a technology analyst 
at agribusiness firm J.R. Sim- 
plot Co. in Boise, Idaho, said 


Sa eee 
VMware's 
Partners 


Some of the third-party vendors 
that will have access to VMware 
source code: 


Advanced Micro Devices Inc. 
BMC Software inc. 


Computer Associates 
International Inc. 


Dell Inc. 
Hewlett-Packard Co. 
IBM 


VMware's move strikes him as 
a gamble. “They had been set- 
ting themselves to be a requi- 
site part of the data center, 
{and} I don’t know if this will 
dilute that possibility,” he said. 

If VMware had truly made 
its code open-source, then the 
company could have opened 
itself up to more competition, 
said Gordon Haff, an analyst 
at INuminata Inc. in Nashua, 
N.H. But VMware’s decision 
to share its source code with 
selected partners “forestalls 
that option.” 

In regard to source-code 
access, Haff said that vendors 
can already get a Windows 
source-code license from 
Microsoft Corp. He viewed 
the VMware announcement 
as more of an expansion of its 
working relationships with its 
vendors. VMware’s main com- 
petitor is Microsoft, which 
purchased virtualization com- 
pany Connectix in 2003 and 
has since released its Virtual 
Server. @ 56162 
China Martens of the IDG News 
Service contributed to this story. 
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NEWS 


IBM's Mills: Linux Is Not 
Just for Unix Replacement 


BY CAROL SLIWA 
SAN FRANCISCO 


TEVE MILLS, senior vice | 


president and group 
executive for IBM’s 


software division, spoke | 


with Computerworld at the 
LinuxWorld Conference here 
last week about Linux usage 
trends and the open-source 
operating system's future. 


To what degree are you starting 
to see fresh deployments of Lin- 
UX, as opposed to customers who 
are merely switching from Unix to 
Linux? They’re still doing what 
they were doing, but they’re 
also now doing a lot of incre- 
mental new implementations. 
What has been building mo- 
mentum in the marketplace 
for the last couple years has 


Continued from page 1 


LinuxWorld 


allows multiple operating sys- 
tems to run concurrently on 
the same physical server — is 
nearing finalization. The lead- 
ing Linux distributors, Red 
Hat Inc. and Novell Inc., plan 
to incorporate Xen into the 
next versions of their operat- 
ing systems. And new chip 
technology on the way from 
Intel Corp. by the end of the 
year and Advanced Micro De- 
vices Inc. next year promises 
to boost performance. 

Some Linux users, including 
top financial institutions, have 
been so anxious to get their 
hands on the new Xen technol- 
ogy that they have been test- 
ing early versions of it, said Si- 
mon Crosby, a founder of Palo 
Alto, Calif.-based start-up Xen- 
Source Inc., which plans to sell 
products in support of Xen. 

But that doesn’t mean they 
expect to deploy Xen in a pro- 
duction environment any- 
time soon. Timothy Golden, a 
senior vice president of Linux 
engineering at Bank of Ameri- 
ca Corp., said the company is 


been actually new ap- 
plications going in that 
are running on Linux. 
Application providers 
are putting their code 
onto Linux because 
they want new sales. 


Now that Linux is matur- 


| ing, are you seeing more 
| companies trying to virtualize 
| their environments? There is 





| : 
clearly a trend toward trying 


to get better cost of owner- 
ship. The use of VMware or 
the Xen open-source hypervi- 
sor, these kinds of things are 
building up momentum in the 
marketplace because the cus- 
tomers are staring at cost of 
ownership and often relatively 
lightly loaded individual 


servers. 


considering many approaches 
to Linux virtualization, includ- 
ing Xen, and is anxious to see 
what lessons are learned by 
the early adopters. 

“Obviously there’s a buzz, 
and we're excited too,” he said. 
“But at this point, it’s more im- 
portant that the industry sig- 
nals the space is truly enter- 
prise-ready before we rush to 
production.” 


Waiting Game 

A CIO at a major financial 
firm who asked not to be 
named said he doesn’t think 
Xen will be considered for 
production use until the mid- 
dle of next year. “Most are do- 
ing what we’re doing — wait- 
ing for Xen to be fully inte- 
grated into Linux. In the 
meantime, we’re doing some 
serious playing,” he said. 

His company already uses 
commercial virtualization 
technology from VMware Inc. 
for its Windows-based Citrix 
Systems Inc. terminal servers 
and its development and qual- 
ity assurance machines. 

Many of the financial firm’s 
thousands of Linux servers 
see only 25% to 30% utiliza- 





To what degree is IBM 
working on Xen? We 
have internal activity 
related to Xen. We 
are engaged with the 
[Xen] community. We're 
anxious to see Xen be- 
come more mature. We 
think the market needs 
choices on hypervisor 
virtual machine capability. An 


open hypervisor certainly has a 
| lot of attractiveness. 


Will Xen be IBM’s recommenda- 
tion for customers, once it’s fully 
cooked and ready? We wouldn't 
be engaged in it if we didn’t 
feel that we were going to 
eventually be putting a big 
endorsement around it. 


| How do you feel about Linux be- 


| tion and could benefit from 


virtualization. But the CIO 


| said many users will be reluc- 


tant to pay for VM software 
for large environments. 

“We have much more ambi- 
tious plans in the Linux space 
for virtualization,” he said. “We 
want it as fast as anyone else. If 
we could get it today, we would 
deploy it. But it’s not ready.” 

Not every Linux user has 
been willing to wait for the 
open-source options to mate- 
rialize. Some IT shops have al- 
ready virtualized their Linux 
environments, typically in tan- 
dem with Windows servers 
using software from VMware. 

Assurant Inc. purchased 
VMware software as part of a 
strategic decision to consoli- 
date its Windows and Linux 


| servers, said Ryan Pearson, a 
| Woodbury, Minn.-based lead 


systems administrator at the 
insurance company. Assurant 
has since found additional 


| benefits, such as a reduction 


in the time required to provi- 
sion servers from days to as 
little as an hour in some cases. 
Pearson said that Xen looks 
promising and that his compa- 


' ny will likely consider it if it 








ing a two-horse race between 
Red Hat and Novell? There 
were always smaller distribu- 
tors, but this two-horse race 
phenomenon has been with 
us now for some time. We’re 
perfectly fine with it. It’s 
about distribution. It’s about 
accessibility by the buyers 
to a fully packaged operating 
system. 


You don't feel the need to have 
more control over Linux distribu- 
tion? No. 


Given the growing popularity of 
Linux, what are the plans for 
AIX? We'll continue to invest 
in AIX for as long as we have 
customers that are using AIX. 
I still have a team on OS/2. 


Hewlett-Packard and Open Source 
Development Labs discussed the 
need to curb the proliferation of 
open-source licenses. What’s 
your take? There’s always go- 
ing to be more than one. It’s 
hard to imagine the world’s 


New Linux 
Deployments 


Ritz Camera Centers | 


The Indiana Depart 
of Education plans to de 


has the same capabilities as 


| VMware's software. 


J.R. Simplot Co. ran out of 
space for racks in its data cen- 
ter and turned to VMware 
about three years ago to virtu- 
alize both its Windows and 
Linux server environments, 
said Tony Adams, a technolo- 
gy analyst at the Boise, Idaho- 
based agribusiness. 

The company was able to 
eliminate hardware at roughly 
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going to get to one licensing 
model. So we’re not necessari- 
ly bothered by the fact that 
there are multiples. We kind 
of expect that. 


What about HP’s call to adopt the 
GPL? Well, that’s never going 
to happen. There are multiple 
viable popular sets of terms. 


Do you disagree with what Sun 
did with open-source Solaris? 
They’re hunting for ways to 
grow their business. I assume 
that’s why you do those kinds 
of things. I’m not sure where 
that particular strategy goes 
in terms of what that’!! mean 
to their financials as a com- 
pany. But the fact that there 
are multiple licenses out 
there, to me, this is sort of a 


silly issue. @ 56180 


MORE ONLINE 


For an extended version of the interview 
with Steve Mills, visit our Web site: 


QuickLink 56173 
www.computerworld.com 


a 3-to-l ratio and now has 150 
Windows “guest” operating 
systems and about 50 Linux 
instances running on 15 physi- 
cal servers equipped with 
VMware software, Adams said. 

David Trainor, a senior mid- 
dleware analyst at Louisville, 
Ky.-based Yum Brands Inc., 
which owns and franchises 
KFC, Pizza Hut, Taco Bell and 
other fast-food franchises in 
about 100 countries, said the 
company will likely stick with 
VMware. Yum has already 
made the business case for it, 
estimating savings at $250,000 
in the first year, Trainor said. 

Some of the company’s 
Windows servers were using 
as little as 1% or 2% of their 
processing power, Trainor 
said. Yum expects to have 276 
virtual machines on 60 boxes 
by year’s end, he added. 

So far, many of the pain 
points of server sprawl that 
virtualization software can 
help to alleviate are most visi- 
ble with Windows, noted Tony 
Iams, an analyst at Ideas Inter- 
national Inc. He said it’s un- 
ciear whether Linux servers 
will encounter the same un- 
derutilization issues. @ 56182 
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_ NEWS 


DHS: Private-Sector IT Must Focus on Cybersecurity 


BY GRANT GROSS 
WASHINGTON 


The U.S. Department of Homeland Se- 
curity last week called on corporations 


| to make more of an effort to protect 
| their private infrastructures. 


| DHS Secretary Michael Chertoff said 
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| at the InfraGard National Conference 














here that his agency will focus signifi- 
cant efforts on cybersecurity and on 
working with private vendors to devel- 
op technologies to provide domestic 
security in the coming months. The 
InfraGard organization was started by 
the FBI to improve information sharing 
on critica! infrastructure between the 
U.S. government and private industry. 

However, private companies already 
have good reasons to protect their own 
cyberinfrastructures, Chertoff said. 

“There’s also a very strong business 
case to be made for private-sector in- 
vestment in security,” he said. “In to- 
day’s threat environment, active secu- 
rity measures are critical to businesses 
themselves, because the cost of an at- 
tack will very, very greatly outweigh 
the cost of protection.” 

Most of the U.S. critical infrastructure 
is controlled by computers, Chertoff 
noted, and most of that infrastructure 
— such as the nation’s electrical grid 
and financial networks — is owned by 
private companies. Chertoff called for 
a “21st century style of organization,” 
where government agencies work 
closely with private companies and 
their IT operations to protect impor- 
tant national assets. “The Department 
of Homeland Security does not and 
should not own and control all these 
systems,” he said. 

Chertoff also called on private in- 
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dustry to develop new technologies 
that the DHS can use in areas such as 
border security, passenger screening 
systems and information sharing. “To 
realize the full benefits technology has 
to offer, we have to look outside the 
walls of DHS itself into the great area 
of private enterprise,” he said. 


Development Incentives 

Chertoff said that one way government 
can provide incentives for private 
companies to develop cybersecurity 
products is to create laws that limit 
damages from product lawsuits. 

Also at the conference, David Auc- 
smith, chief technology officer at 
Microsoft Corp.’s security business 
and technology unit, called on the IT 
industry to focus more efforts on de- 
signing cybersecurity products. 

Aucsmith called for more “threat- 
based” software development. “We 
have to assume we have an adversary, 
and every piece of software should be 
written this way,” he said. 

Chertoff didn’t discuss a May report 
from the Government Accountability 
Office that said his agency has “not ful- 
ly addressed any” of its 13 key cyber- 
security areas [QuickLink 54662]. But 
much of his talk at the InfraGard event 
was focused on cybersecurity, whereas 
most past DHS efforts have focused on 
physical security. @ 56132 





Gross is a reporter for the IDG 
News Service. 


intel’s Competitive Practices to 
Face More Scrutiny in South Korea 


BY TOM KRAZIT 

The Korea Fair Trade Commission has 
requested documents from Intel Corp. 
that pertain to the company’s rebate 
and marketing programs, which are al- 
ready under scrutiny in the U.S. and 
Japan, Intel revealed in its quarterly 
filing with the U.S. Securities and 
Exchange Commission last week. 

Intel said it’s complying with a 
request made in June by South Korea’s 
market watchdog to hand over materi- 
als related to Intel’s discussions with 
South Korean PC manufacturers. 

That same month, Advanced Micro 
Devices Inc. filed an antitrust lawsuit 
against Intel in the U.S. charging that 
the larger chip maker is improperly 
using its marketing budget to exclude 
AMD’s chips from PC and servers 
[QuickLink 55353]. 

Specifically, AMD accused Intel of 





cajoling vendors into using mostly 
Intel processors through the selective 
distribution of marketing funds and 
threats of retaliation for buying 

AMD chips. 

The suit builds on an investigation 
by the Fair Trade Commission of Japan 
that found Intel allocated marketing 
funds to Japanese PC vendors such as 
Sony Corp. and Fujitsu Ltd. only if they 
agreed to purchase fewer processors 
from AMD. 

Intel’s marketing programs are 
also being looked at by the European 
Commission, which raided the offices 
of Intel and PC vendors in Europe 
last month as part of a “competition 
investigation,” the commission said. 


@ 56133 
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Network Solutions CEO Touts Small-Business Push — { svicten sens, 


BY SHARON MACHLIS 
It’s been a challenging road in 
recent years for Network Solu- 
tions, the onetime monopoly 
registrar of .com domain names. 
When that business was de- 
regulated in 1999, the company 
lost a significant share of the 
domain-name business. In re- 
cent years, the 
Herndon, Va.- 
based company 
has slowly shifted 
focus, and last 
week it outlined plans for a ma- 
jor push into the small-business 
market. Chairman and CEO 
Champ Mitchell talked about his 
plans for the company after the 
announcement. 


You're charging $35 a year for do- 
main names while some competi- 
tors charge about one-fifth that 
price. How do you sustain that? 
We're a lot better. Network So- 
lutions used to be the monop- 
oly. Between a combination of 
abusing its customers and giv- 
ing the poorest customer ser- 
vice on the face of the planet, 
they managed a first: They 
lost market share faster than 
any former monopoly in the 
history of the United States. 


Is the new revenue mostly from 
Web hosting? It’s a combination 
of online services for small 
businesses. That’s the part of 
the business that’s growing. 


Why the surge in small-business 
usage? It’s search. Increasing- 
ly, small businesses are be- 
coming aware that the way to 
be found is online, that people 
have stopped going to the 
Yellow Pages. 


What about your enterprise cus- 
tomers? We’ve got a number 
of those. We cherish them. 
They’ll manage 10,000, 15,000 
domains. And the truth is, no 
matter how good our cus- 
tomer service is, they don’t 
want to call it because they’ve 
got too many domains to man- 


For more from Mitchell, go to our Web site: 


QuickLink 56079 
www.computerworld.com 


age, and they’re professionals. 
What they want is self-man- 
agement tools. We work very 
hard to keep the best self- 








with every [small-business] 
| management tools in the busi- | bright people who are pretty customer we add today, but if 
| ness for those people. But the | aggressive, but they aren’t we keep them, we will make 
| growth part of our business is | technologists. And we've had more money in the long run. 
totally different. They are very | to change ourselves and re 
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OPINION 


DON TENNANT 


A Change of Heart? 


ELL, WHAT DO YOU KNOW. 

Hewlett-Packard announced last 

week that CEO Mark Hurd is go- 

ing to show up at the HP Technol- 

ogy Forum in New Orleans next 
month after all. Thank goodness. 


As I mentioned in a 
couple of recent editori- 
als [QuickLinks 55548 and 
55704], I found it troubling 
that Hurd wasn’t planning 
to attend the company’s 
inaugural unified user 
conference because of a 
“scheduling conflict.” 

When I asked HP to 
explain the change, com- 
pany spokesman Ryan 
Donovan said HP had 
resolved the scheduling 
conflict. Donovan declined to com- 
ment on whether the change was 
made in response to any pressure or 
persuasion from outside of HP. 

In the big scheme of things, it real- 
ly doesn’t matter what the impetus 
was. HP deserves credit for doing 
the right thing. But there’s one thing 
that still nags at me. 

It just seems incomprehensible 
that HP’s leadership couldn’t foresee 
what a bad idea it was not to have 
arranged Hurd’s attendance from the 
get-go. Anyone with even a smidgen 
of PR savvy should have known that 
being a no-show at such a core 
event, especially during a critical re- 
organization, would present Hurd as 
picking up the aloofness baton from 
Carly Fiorina. One reader, comment- 
ing on Hurd being unable to attend 
his own conference but able to find 
the time to keynote at an Oracle con- 
ference the following week, asked: 
“Is Mr. Hurd truly following in the 
footsteps of Ms. Fiorina and con- 
tributing [to] the downfall of a once- 
great organization that was HP?” 

My concern is that the HP corpo- 
rate hierarchy is so out of touch with 
its users that it doesn’t realize how 





disenchanted many of 
them are. Another reader 
recounted a story of the 
HP World 2001 confer- 
ence, where e3000 prod- 
uct manager Winston 
Prather proclaimed that 
the e3000 line was an in- 
tegral part of HP’s vision 
for the future. Of course, 
HP announced just three 
months later that the line 
would be discontinued. 
According to this reader, 
in January 2002, marketing program 
manager Alvina Nishimoto let it slip 
that the decision to kill the e3000 
had been made before HP World, but 
HP’s management felt that wasn’t the 
proper time or place to announce it. 
When I asked Donovan about the 
accuracy of that account, he dressed 
it up a little but really didn’t refute 
it. “A key outcome of the planning 
which led to our eventual e3000 end- 


| 
| 








of-support road-map announcement 
was an objective to communicate the 
decision as clearly and promptly as 
was practical,” Donovan wrote to 

me in an e-mail. “Our announcement 
was made as soon as we had a) a 
final senior management approval 

of the decision, and b) deveioped a 
communication and action plan that 
was complete and appropriate, based 
on the gravity of the decision. Nei- 
ther of these [was] in place at the 
time of HP World 2001.” 

In any case, the damage had been 
done, at least to that one reader. 
“What all of this meant to me was 
that under Carly Fiorina, Hewlett- 
Packard had degenerated into an 
organization that could no longer 
be trusted,” he said. 

HP needs to rebuild the trust, and 
Hurd’s presence at the Technology 
Forum will be a significant step in 
that direction. I don’t know if getting 
him there involved more a change 
of schedules or a change of heart. I 
like to think it’s the latter. At least it 
would mean he has one. Post-Fiorina, 
that’s what HP’s users need to see. 
@ 56136 
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DAVID MOSCHELLA 


IT’s Problem 
Is loo Many 
Dipsticks 


VERYONE AGREES about 
the problem. With very 
few exceptions, enter- 


prise IT organizations are 
drowning in low-value work. My com- 
pany’s research shows that roughly 
two-thirds of most IT staffers’ time is 
spent on the installation, migration, 
patching, security and compliance 
work that, while clearly necessary, 
contributes little or no direct business 
value. In some organizations, the fig- 
ure is closer to 90%. 

Pretty much everyone also agrees on 
the cause of the problem. Stovepiped 
information systems, built for different 
purposes at different times, span a mix 
of largely incompatible hardware and 
software. They weren't built for to- 
day’s rapidly chang- 
ing business climate, 
and they often can’t 
enable the innova- 
tion and agility the 
marketplace now 
requires. In some 
cases, the instability 
of years of bridging 
and integration work 
even threaten the op- 
erations of the com- 
pany itself. 

Oddly, there is of- 
ten no one to blame 
for this sad and very “aoe 
frustrating situation, especially on th 
IT side of the house. Most of the cur- 
rent mess evolved from making what 
at the time seemed to be one good 
business decision after another. 

The solution to the problem is 
more complicated. From a technology 
perspective, the adoption of service- 
oriented architectures (SOA) is seen as 
the best path forward. By defining ac- 
tivities as high-level services, compa- 
nies can mask many underlying system 
incompatibilities and achieve new lev- 
els of simplicity, reuse and agility. Or at 
least that’s how the argument goes. 

In the real world, things are a bit 
more murky. While SOA is becoming 
an important way of designing and 
thinking about information systems, it’s 
no silver bullet. In the short run, SOA 
actually increases system complexity 
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and requires conceptual and architec- 
tural skills that many IT departments 
sorely lack. Most enterprises are still 
experimenting, and even the leading 
vendors talk about a relatively slow 
transition, with the real momentum for 
SOA not building until 2007 or so. 

But technology is at best half of the 
solution. Information system simplicity 
and agility will never be achieved un- 
less businesses adopt the necessary dis- 
cipline. After all, many of today’s stove- 
piped systems were the natural off- 
spring of stovepiped organizations and 
business processes. This is why so many 
companies have systems that include 
the same customer names, addresses, 
account numbers, dates and other data. 

Consider the following analogy from 
the automotive industry. Many years 
ago, a major truck manufacturer dis- 
covered that its costs were higher than 
those of its competitors because it 
used so many more parts to build its 
fleet. On further analysis, it learned 
that it actually used eight oil dipstick 
designs, while its competitors used just 
one. Though each dipstick added de- 
sign and manufacturing costs, the eight 
designs contributed no meaningful 
marketplace value. Many other parts of 
the truck were similarly different, but 
not differentiating. 

The task for corporate IT managers 
is to first identify where the equiva- 
lents of the eight dipsticks reside and 
eliminate them. Until needless com- 
plexity and redundancy are signifi- 
cantly reduced, companies won't real- 
ize the agility that IT should enable. In 
the end, the rigor and power of SOA 
will mean little unless it’s matched by 
equally rigorous changes in business 


behavior. @ 56044 


DAN VERTON 


So You Think 
Your Data 
Is Secure? 


VERYTHING I’m about 
to tell you is true. And if 
you're a corporate exec- 


utive who’s serious about in- 
formation security, corporate gover- 
nance and compliance, you will cut 
this column out and nail it to your 
CEO’s office door. 

In the course of researching my latest 
book, The Insider: A True Story (Llumi- 
na Press, 2005), which traces the history 


| 


of some of the most notori- 
ous insider security breach- 
es in history, I came across a 
company that offers free 48- 
hour risk assessments based 
on its new insider-monitor- 
ing appliance. And while it’s 
not my job to sell you on this 
product, I do want to share 
the insight I gained from a 
review of more than 50 of 
the real-world assessments 
this company conducted at 
some of the biggest firms 
and government agencies in 
the nation. 

Companies have invested 
millions of dollars on secur- 
ity systems like firewalls, 
intrusion-detection devices, 
antivirus software and bio- 
metrics. But they’ve done close to noth- 
ing to ensure the security of sensitive 
data as it’s handled by those with au- 
thorized access to it. Don’t believe me? 
Consider these findings: 

@ A 48-hour risk assessment con- 
ducted in April at a top 20 financial 
institution intercepted a spreadsheet 
containing the names of 200 customers 
and their account numbers, account 
balances and tax identification num- 
bers as it was being transmitted to a 
personal EarthLink e-mail account. 


Employees of this firm also 
routinely sent customers 
information in clear text 
that contained Social Secu- 
rity numbers, names, ad- 
dresses, dates of birth, dri- 
ver’s license numbers, ac- 
count numbers and bal- 
ances. And while the firm 
has made considerable ef- 
forts to develop a strong 
privacy policy and build a 
secure e-mail system, only 
12% of the data monitored 
was encrypted — a specific 
recommendation of the 
Gramm-Leach-Bliley Act. 
@ That same month, tech- 
nicians conducted a similar 
risk assessment at one of 
the biggest IT firms in the 
country — a company that has a securi- 
ty budget to die for. In two days of mon- 
itoring, the system intercepted proprie- 


tary planning documents being e-mailed | 
| of the economy because policies are 


| via Web mail (and yes, the company 
thought it had locked that down) to a di- 
rect competitor. The employee in ques- 
tion, along with 50 of his colleagues, 
had been hoping to land a new job. 

@ In the manufacturing sector, one 

| of the biggest brand names in the US. 

| was shocked to find what amounted to 
material weaknesses in its internal 


aa Agta 





controls. Payroll data and hundreds of 


| Social Security numbers were discov- 
| ered leaving the network unencrypted 


and going to private e-mail accounts. 


| In addition, 123 engineering and design 


documents had been sent to unautho- 


| rized recipients outside the network, 
| only days before a major new product 


campaign was to be launched. 
® Officials at various hospitals were 


| shocked to learn that privacy-protected 
| data on hundreds of patients was rou- 
| tinely leaving the network and going to 


unauthorized recipients. One facility 


| recorded 2,000 violations of the Health 


Insurance Portability and Accountabil- 


| ity Act in 48 hours. Another watched 

| in horror as the names and medical in- 
| formation of more than 500 patients 

| with HIV/AIDS were communicated to 


a private Hotmail account. 

These were 48-hour snapshots of 
what’s really happening behind the fire- 
wall. These incidents and many more 
like them are occurring in every sector 


meaningless without an enforcement 
mechanism. It’s one thing to trust. It’s 
quite another to verify. @ 56000 
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We Should Learn to Love Legacy Systems 


REALLY ENJOYED the frank com- 

ments concerning legacy soft- 
ware, especially those from Frank 
da Cruz [“Love That ‘Legacy,’ ” 
QuickLink 55070). Anyone who's 
been through 20-plus years of soft- 
ware and hardware changes will 
understand that the newest and 
cutest is often riddled with holes 
and problems. Since the young- 
sters often ignore the experience 


gained in the past, many of the new | 


problems are the same ones com- 
mitted by legacy developers many 
years ago. It's too bad today's col- 
lege graduates haven't been taught 
any historical facts and knowledge. 
Unlike the hard sciences, which 
depend upon the lessons of history 
to make it unnecessary to reinvent 
old errors and problems, software 
engineering often forges ahead, 
banking upon the illusion that new- 
er must be better. Just imagine a 
hardware system with today’s cost- 
effective gigahertz cycle time and 
gigabytes of memory running a sys- 


| tem as bulletproof and secure as 
208, as flexible as 2VM, with net- 

| working control like Unix, the devel- 
| opment power of Java and a user 

| interface like Windows. That's what 
we could have had by now if the 
young folks had taken the time to 
learn from the past. 

| Joe Bell 

| Systems engineer, 

Fujitsu Computer Systems, 
Kansas City, Mo. 


Y THE DEFINITION in the arti- 

cle, all new mainframe DB2 
stored procedures written in Cobol 
are legacy from the day they are 
written. This doesn’t make sense. 
Legacyis not a programming lan- 
guage or platform issue. A lot of 
DOS software written in non-Cobol 
languages before Windows 95 pro- 
hibits Windows systems administra- 
tors from locking down control- 
panel functions without rewriting 
code or modifying the registry. Con- 





sequently, the date for software to 





become legacy in a Windows envi- 
ronment should be 1995. 

But rather than defining /egacy 
by a specific date or platform, there 
are certain attributes that cause 


| software to not run on new versions 


of operating systems and make new 


| features of these operating systems 
| unusable. This is what causes code 


to become legacy, and this is true 
regardless of platform or program- 
ming language. 

Your definition sounds as if soft- 
ware without planned obsolescence 
is bad. To the contrary, good soft- 
ware design should be done with 
the long-term future of the business 
in mind. Replacing old but good 
business software with new soft- 
ware must be appropriately justified 
and provide a beiter return on in- 
vestment than the old software. 

Care must be taken to ensure the 
definition of legacyis appropriate 
and not a propaganda term spon- 
sored by corporate marketing or 
generational bias. 

David Anderson 
Sarbanes-Oxley IT auditor, 


| adjunct faculty, Davenport 

| University, Caledonia, Mich., 
David.W.Anderson@ 
charter.net 


ET'S NOT FORGET the normal, 
English meaning of legacy 

| wealth generated by earlier genera- 
tions that we are privileged to have 
at our disposal today. 

Jim Gawn 

| Consultant, Information 

| Services Group Inc., 

New Cumberland, Pa. 
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atory mandates 
. 
and financial losses 
. . 
from missed opportuni- 

. . 
ties push companies to 
automate contract man- 

’ Y 
agement Processes. 
gers .% 

By Kym Gilhooly 

F ANYONE UNDERSTANDS how complex 

contractual commitments can be, it’s an 

IT professional. For example, in 1997, as 

part of a Y2k preparation, the CIO at Toy- 

ota Motor Sales U.S.A. Inc. decided it was 

time to shore up the IT organization’s 

buy-side contract management processes. 

Like numerous IT organizations, Toyota’s 

group was leaking cash through manual 
contract processes and wanted to see if re-engineer- 
ing and automating them through contract manage- 
ment technologies would improve efficiencies and 
data visibility. 

The effort has paid off. Toyota initially deployed 
an Access-based desktop contract-tracking tool from 
Contract Management Solutions Inc. (CMSI) and 
later the vendor’s Web-based Contract Manager appli- 
cation in a hosted model. Since then, Toyota has real- 
ized about $14 million in savings, according to Sam 
Barton, senior contract manager at the Torrance, 
Calif.-based company. Based on the system’s success 
in the IT department, its use has spread to Toyota’s 
Toyota Motor Sales U.S.A. has realized about $14 TLL in savings by using contract-tracking Z logistics, financial services and legal departments. 

OURO rN CSS Us ACU Me ie MUU! meme ee Unlike Toyota, most businesses still rely largely on 
manual processes for managing their contractual 
commitments. Not only do they fail to exploit their 
contracts to full benefit — missing expiration, ser- 
vice-level review, price review and rebate dates, or 
letting low-value maintenance contracts automatical- 
ly renew — but they sometimes mismanage them to 
legal peril. Given that 60% to 80% of business-to- 
business deals are predicated on some kind of con- 
tract, according to Aberdeen Group Inc., contract 
management can’t be ignored. 

If the financial toll exacted by missed oppor- 
tunities and underperforming commitments isn’t 
enough, the compliance pressures brought on by 

Continued on page 24 
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Continued from page 21 
the Sarbanes-Oxley Act and other regulatory initia- 
tives add incentive, as do growing concerns over risk 
mediation due to globalization. Companies are in- 
creasingly making a broader range of their contract- 
ing processes electronic through both in-house de- 
velopment efforts and commercial systems. To date, 
however, the penetration of commercial systems is 
small, and the market is immature, say experts. 
“Even in larger companies, Excel is still the leading 
business application [for contract management],” says 


Tim Minahan, an analyst at Aberdeen Group. He says | 


the next couple of years will be critical to the con- 
tract management market, particularly for pure-play 
contract life-cycle management software providers, 
including DiCarta Inc., I-many Inc., Nextance Inc., 
Upside Software Inc. and CMSI, which was recently 
acquired by Atlanta-based sourcing provider Procuri 
Inc. Contract life-cycle management systems are de- 
signed to access and store structured and unstruc- 
tured data such as pricing, pertinent dates, compli- 
ance criteria and negotiated terms. They’re beginning 
to be integrated with ERP, CRM, content manage- 
ment and other data sources so that transaction data 
can be reconciled against contract criteria. 

Meanwhile, enterprise application suite vendors 
such as Oracle Corp., SAP AG and Siebel Systems Inc. 
are adding contract management functionality as part 
of sourcing and procurement strategies. 

“Contract management is much more than an elec- 
tronic document repository; the biggest value will 
come from predictive event management, where 
careful attention is paid to the events — both date- 
and value-specific — that happen during the life of a 
contract,” says analyst Andrew Kyte at Gartner Inc. 


Rollover Alert 


Much of Toyota’s savings, says Barton, stems from 
better tracking of maintenance agreements that have 
automatic rollover clauses, some of which weren’t 
delivering value or were for IT systems Toyota was 
no longer using. Since deploying CMSI’s Contract 
Manager module, Toyota has added Deal Manager, 
which manages deals from inception through negoti- 
ation, and Supplier Manager for sourcing. The com- 
pany is exploring the feasibility and value of interfac- 
ing the contract management system with its People- 
Soft ERP system for sharing transactional data. 

The need to gain better visibility into its contracts 
prompted Countrywide Financial Corp. in Calabasas, 
Calif., to move from an approach that relied on Lotus 
Notes and Access toward a comprehensive contract 
management strategy based on technology from 
Nextance. Countrywide’s corporate contracts group, 
which handles all buy-side contracts for its 45,000 
employees, managed 900 contracts in 2004 and ex- 
pects to handle about 1,200 this year. This growth, 
coupled with regulatory pressures, drove Country- 
wide to automate its contract processes. The project 
group started piloting Nextance’s Intelligent Enter- 
prise last September and expects to go live this sum- 
mer, according to Richard Layne, contract manager 
and project manager for the implementation. 

Countrywide’s IT, contract management and legal 
departments worked closely with Nextance’s profes- 
sional services group to create compliant contract 
templates and clause libraries and to map workflows 


TECHNOLOGY 


Though contract management vendors typically have products 
for both buy- and sell-side situations, says Gartner analyst 
Andrew Kyte, it's important that businesses understand that 
each function demands a different deployment approach. “Ob- 
viously, to be fully in control, a business needs to be managing 
all of its contracts,” says Kyte. “However, each [side] demands 
separate projects because there are differences in systems in- 
tegration, in users, in sponsorship. It's important that business- 
es initiate their contract management activity in an area they 
can effectively contro! and not try to simultaneously handle con- 
tracts for both the buy and sell sides.” 

It's the sponsorship question that often causes the biggest 
hurdle to contract-process improvements, according to Tim 


that adhere to the financial firm’s approval processes. 

“It’s a lot of work, setting up the templates,” says 
Layne. “Somewhere down the road, contracts will in- 
corporate best practices so they will be self-sufficient, 
taking into account variables as well as including 
conditional clauses.” He says Countrywide is experi- 
encing typical challenges as it integrates Nextance 
with its new Oracle/PeopleSoft ERP system. 

“We want to make sure, for example, that accounts 
payable doesn’t overpay or double-pay on a contract; 
by interfacing our ERP into our contract management 
system, we can avoid these situations,” says Layne. 

With the ERP integration, Countrywide will be 
able to automate a critical element of its 10-Q report- 
ing — determining outstanding liability on open con- 
tractual commitments — rather than reconciling 
each contract manually. The company is also inter- 
facing Intelligent Enterprise to its entire employee 
contact list and delineating contract approval and 
spending authority so that staffers access, create and 
approve contracts based on permission rules. Plans 
call for integrating the product into Countrywide’s 
asset management module so it can better track ac- 
| quisition and depreciation of IT assets. 

St. Louis-based BJC HealthCare is also improving 
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Cummins, president of the International Association for Con- 
tract and Commercial Management. “Eighty percent of con- 
tracts deal with business issues rather than legal issues, and 
those business commitments come from many disparate own- 
ers. There's finance, IT, HR and external factors like regulatory 
compliance and accounting regulations,” says Cummins. But, 
he says, although a contract is the result of the work of many 
stakeholders, all of whom have specific requirements, nobody 
has overall accountability for its maintenance and management. 
Businesses that opt to move forward with contract manage- 
ment initiatives often do so in the procurement area, specifically 
in IT procurement. “It makes a lot of sense for ClOs to be the ini- 
tial sponsors for adoption of contract management,” Kyte says. 
The number of contracts is smaller than in other areas, and 
people in IT procurement are used to working closely with the 
IT organization on processes and integration issues, he adds. 
~ Kym Gilhooly 


its contract management processes as part of an 
overall supply chain optimization effort across its 
network of hospitals. For BJC’s centralized contract- 
ing group, IT has developed an in-house contract 
repository based on WebSphere and an Oracle data- 
base, says Kraig Butts, a project manager for informa- 
tion systems. The repository integrates with BJC’s 
GEAC mainframe financial systems and with a front- 
end requisitioning system accessed through Global 
Healthcare Exchange LLC’s (GHX) electronic busi- 
ness-to-business exchange. When a new contract is 
created, all pertinent information — including pric- 
ing, units of measure, manufacturer ID numbers, 
terms and expiration dates — is uploaded from the 
repository to the GEAC system, and an updated item 
master is transmitted to the GHX exchange. BJC 
replicates the item master to GHX daily, so stake- 
holders can log in for up-to-date reviews. 

About 15 months into the project, BJC has more 
than 30% of the contracts related to its supply spend 
loaded into the contract repository, says Jim Gleick, 
director of supply strategy. BJC is trying to use the 
electronic process for all new contracts and is con- 
verting existing contracts as they make sense. 

Like other companies moving to optimize supply 
and contract processes, BJC wants to better tie trans- 
action data to its contract data so it can automatically 
reconcile discrepancies and ensure accuracy. Cur- 
rently, it’s manually pulling requisition and purchase 
data out of the GEAC system each month to compare 
the item master against the contract database. The 
company is also taking downloads from the finan- 
cials system and the repository and putting them into 
an Access database for reporting purposes. 

“We're happy that we’re getting the data into users’ 
hands and they’re able to create various reports, but 
the process is still too complex and we need to auto- 
mate it,” says Butts. He says the company plans to 
create a data warehouse with business intelligence 
tools built on top for easier reporting and analytics. 

The conversion has taken a lot of staffing, Gleick 
says, but he believes the efficiencies gained are criti- 
cal to improving business operations and, more im- 
portantly, patient safety. “Our goal is that by the end of 
2006, 87% of all our purchasing volume will be con- 
nected to electronic contracts,” he says. @ 55901 





Gilhooly is a freelance writer in Falmouth, Maine. 
You can reach her at kymg@maine.rr.com. 
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IT Needs Help 


Avaya Launches 
Web Services Portal 


@ Avayainc. has announcedits | 
Avaya Voice Portal software for 
speech-enabling Web services 


| 
| 


across large companies. It uses 
open-standards-based Red Hat 
Linux Enterprise 3.0. Dialog De- 
signer, a development tool for 
creating applications, ships with 
the product. Available in Novem- 
ber, Avaya Voice Portal will be 
priced at $900 per port. 


Platform Computing | 


Unveils Orchestrator 


® Platform Computing Inc. has 
developed an automated, policy- 
driven virtual infrastructure man- 
ager. Available this fall, Platform 
VM Orchestrator will provide dy- 
namic balancing and control of 
enterprise resources, autoprovi- 


sioning, and support for heteroge- 


neous environments, the company 
said. Pricing wasn't available. 


Business Objects 
Supports Linux 


® Business Objects SA has ex- 
tended its business intelligence 
platform to support Linux. Busi- 
nessObjects XI now supports the 
Red Hat Enterprise Linux and 
SUSE Linux enterprise server 
systems, the company said. The 
platform is already available on 
Windows and Unix. Business- 


Objects XI on Linux includes guid- 


ed installation and Web-based 
management. 


IBM Adds Grid to 
WebSphere Stack 


& IBM has unveiled WebSphere 
Extended Deployment 6.0, which 
is designed to combine the capa- 


bilities of autonomic and grid com- | 


puting to maximize the effective- 
ness of the WebSphere applica- 


tion infrastructure stack, IBM said. | 


The software will support the de- 
ployment of a high-performance 
environment for executing both 
online and long-running applica- 


tions in WebSphere. It will be gen- | 


erally available Aug. 30. 





Finding Root Causes 


VER STAY AWAKE at night wondering about | 


the cost of network downtime? In 2004, In- 
fonetics Research put that figure at 3.6% of a 
company’s annual revenue. After studying 
more than 80 large corporations, Infonetics 
found that companies experience an average of 501 
hours of network downtime per year. That number 


translated into millions of 
dollars in lost productivity 
and revenue, and it hasn’t 
gotten any better in the in- 
tervening months. 

On top of the money 
they’ve lost, companies in- 
vest millions of dollars each 
year in various technologies 
to attempt to solve IT infra- 
structure problems more 
quickly. They are, however, 
no closer to the Holy Grail of 
automated root-cause analy- 
sis and problem resolution. 

In order to understand 
why that’s the case, it’s necessary to un- 
derstand the five steps in the IT problem 
management process. 

1. Detection. The ability to know what’s 
happening in your infrastructure is a 
crucial first step in managing problems. 

Most of the new technologies we have 
seen in this area in the past five to 10 
years have been designed for detection. 
Network management systems such as 
IBM Tivoli, HP OpenView, CA Unicen- 
ter and many others were first designed 
to monitor the enterprise infrastructure 
by polling network devices and servers 
periodically. If the polling fails a prede- 
termined number of times, a problem 
is detected, and an alert is sent to the 
administrators. In the security world, 
network and host intrusion-detection 
systems have been developed to identify 
problems on the network and servers. 
None of those technologies, however, 
can tell you where the problem is or 
what caused it. 

2. Identification. After a problem has 





been detected, IT adminis- 
trators must spend a lot of 
their time identifying where 
it actually occurred. These 
IT administrators either use 
the most basic network 
tools, such as ping and 
traceroute, simply rely on 
domain knowledge of their 
own networks or analyze 
network traffic using snif- 
fers to locate the problem. 
Products such as EMC 
Smarts are designed to 
accelerate identification. 
Smarts starts by mapping 
out an infrastructure using various auto- 
mated tools as well as human knowl- 
edge. The mapping will identify, for ex- 
ample, which switch ports are connected 
or which servers are behind an individ- 
ual router or switch. Once the mapping 
is complete, Smarts uses its proprietary 
Codebook Correlation Technology, 
SNMP traps and logs messages from 
routers, switches and servers to identify 
where the problem might have occurred. 
3. Determination. Even though some of 
these newer technologies help IT admin- 
istrators identify where the problem 
might be, they are still very limited in 


| determining the actual root cause. Why 


did my Web server go down? Was it 
caused by memory corruption? Was it 
the result of a security exploit? Was it 
misconfigured? You get the idea. 

There is no doubt that problem deter- 
mination is the most difficult stage of 
the process. The majority of trouble- 
shooting time is spent determining ex- 
actly what’s causing the problem. Even 





today, IT administrators must manually 
perform root-cause or forensic analysis 
by digging through mountains of log 
files or analyzing seas of traffic packets. 
No technologies have been developed to 
help IT administrators automate the 
determination process. 

4. Resolution. Once the problem has 
been identified and root cause has been 
determined, IT administrators can 
usually fix the problem quickly, though 
there are obviously those that require 
long-term resolution efforts. 

Some vendors have developed tech- 
nologies that jump from problem identi- 
fication to resolution, skipping the 
determination stage. These automated 
resolutions can range from simply block- 
ing an offending IP by modifying router, 
switch or firewall configurations to exe- 
cuting a program or script to perform 
much more complex instructions. This 
can be extremely dangerous, because 
mistakes can make the network or infra- 
structure unavailable to legitimate users. 
Intruders may also exploit these auto- 
mated resolution mechanisms to per- 
form denial-of-service attacks. 

5. Reflection. The postmortem is one of 
the most important stages in the process. 
IT administrators should take time to 
document the first four steps in the 
process, determine how to prevent a re- 
currence of the problem, identify and re- 
solve other similar problems, and review 
the whole process to see how it can be 
improved. 

Even without reflection, we can see 
that technology isn’t solving the problem 
management process. Most tools are 
designed to help with detection, and a 
few help locate problems, but none has 
been developed to automate the process 
of determining the root cause. If we 
see new technologies in this area in the 
near future, the lives of IT administra- 
tors will suddenly become much easier. 
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SC LOGISTICS INC. has a line 
item in its budget that few 
companies share: IT depart- 
ment revenue. “It’s not a huge 
amount of money,” CIO Jon Field- 
man, “but it’s something; it’s measurable.” 
Fieldman has a point: The dollar figure 
isn’t what’s remarkable; it’s the fact that 
his department brings in money at all. 
Most organizations count their IT 
departments as cost centers, but some 
ave had success selling their tech- 
nology or services to external customers. 


As a result, they bring money into their 

organizations. It’s a business model t 

could change how companies view I 
“It will never be a dominant part of 


what companies can do, but in the right 
circumstances, it is something they will do,” sz 
John Karnatz, group director at Technology Services 
Development Group in Bartlett, Ill. 

<ecutives caution against envisioning too many 
dollar signs, though. They agree that extra revenue is 
secondary to improvements in products and services 
for internal and external clients that are made possi- 


TECHNOLOGY 


DOESNT HAVE TOBE 


AMONEY PIT. 
HERE ARE SOME 
GROUPS THAT BA 


ble by the additional money IT brings in. 

For a thin-margin business such as that of DSC 
Logistics, Fieldman’s accomplishment “is significant 
to our bottom line,” says Chief Financial Officer 
JoAnn Lilek. “But the bigger thing is it’s of value for 
our customers.” DSC Logistics provides national 
supply chain management to companies such as 





BY MARY kK. PRAT 


Kimberly-Clark Corp orgia-P2 
and Kellogg 
5 Logistics’ business model always 
included some IT services te customers, 
but Fieldman he noticed shortly after 
starting at the Des Plaines, Ill.-based 
company in 1998 that some requests went 
beyond standard services. “So over time, 
we slowly began to put in a framework, 
setting up in our contracts that there 
were base IT services and supplemental 
IT services at an additional rate,” he says. 
Fieldman remembers one company 
that wanted to simplify how it put holds 
on warehoused products. His IT staff 
built customized software for that cus- 
tomer based on a form that the customer 
been using internally. 
Fees for such services vary, taking into account the 
work involved for each project, Fieldman says. He 
won't disclose how much money his IT department 
makes but says the investment required to create a 
revenue-generating shop was minimal. 
“The main thing that changed is how people think,” 
Fieldman explains, saying he worked with peopie in 
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sales, customer service and the execu- 
tive suite to help them understand the 
market for IT services. “The paradox is 
when you charge people, they really 
appreciate the value,” he observes. 
“When it’s free, there’s a risk that peo- 
ple will perceive it’s not valuable.” 


Insourcing 

Customer needs also transformed 
Ellen Barry’s IT department. Barry is 
CIO of the Metropolitan Pier and Ex- 
position Authority, a public entity that 
operates McCormick Place and Navy 
Pier in Chicago. When she started the 
job in 2000, an outsourcer provided 
technical services to groups using the 
tourism and convention spaces. Barry 
thought her staff could do better. “I 
wanted quality to be primary,” she says. 

Barry says she wouldn’t have pur- 
sued the idea if she thought the venture 
would have lost money; she initially 
figured she could break even. But 
when the outsourced provider fought 
her attempts to take over the services, 
she realized there was money at stake. 
“I clicked my fingers and said, ‘I’m on 
the right track,’ ” she recalls. 

To make her plan work, Barry had to 
add both products and people to her 
department. She now has 500 miles 
of fiber running among the various fa- 
cilities. This includes fiber to all the 
rooms and conference facilities in the 
Hyatt Regency McCormick Place, 
which Global Hyatt Corp. manages but 
the city owns. The fiber also connects 
Navy Pier, so smaller shows and ex- 
hibits there have the same technical 
capabilities. 

Barry hired eight people, all techni- 
cal folks who work well with clients 
under tight deadlines. These new hires 
joined the 20-plus who manage the 
authority’s internal systems. 

This venture didn’t come cheap: It 
cost $1.7 million to implement, Barry 
says. She wouldn’t disclose how much 
her Internet/technical services group 
brings in annually, but she says she re- 
couped her initial investment within 
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two years. Like Fieldman, Barry says 
the value doesn’t necessarily rest with 
the dollars brought in. “It’s part of 
what I consider my competitive advan- 
tage,” she says. 

Others agree. “By providing these 
kinds of services, she’s not only going 
to maintain her current clients; she’s 
going to attract new customers,” says 
Joe Mambretti, director of the Interna- 
tional Center for Advanced Internet 
Research at Northwestern University. 
Mambretti says he’s impressed by what 
Barry’s IT department has to offer. He 
points out that McCormick Place in 
early June hosted Supercomm, the 
world’s largest annual all-inclusive ex- 
hibition and conference for communi- 
cations service providers and private 
network managers. The event used 
many advanced technologies, such as 
webcasting and high-definition broad- 
casting over IP networks. 


Not Easy 


Despite successes such as Barry’s, rev- 
enue-generating IT departments aren’t 
common, experts say. 

Karnatz studied the trend as part of 
The ProfIT Research Initiative, a joint 
venture of Northern Illinois University 
and Technology Services Development 
Group. 

Karnatz’s study identified some of 
the challenges of turning an IT depart- 
ment into a revenue-generating opera- 
tion. He says most executives aren’t 
fully prepared for the organizational 
shift it requires. They don’t know how 
to gather and account for revenue, set 
up contracts and provide customer 
service to external customers. 

The study also identified a continu- 
um, Karnatz says. On one end were IT 
groups that were entirely internally fo- 
cused; on the other end were IT de- 
partments operating as profit and loss 
centers. In between were departments 
becoming more strategic and support- 
ive, moving toward a quasi-commercial 
model. “People aren’t so much looking 
to cover the cost of the IT infrastruc- 
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ture but looking to sustain the cost of 
the activity,” he says. 

That’s exactly what Randy Smith 
discovered. As chief technology officer 
and associate professor of business 
administration at the University of 
Virginia’s Darden School of Business 
in Charlottesville, Smith helped devel- 
op a suite of student-life applications. 
When officials demonstrated one of 
the applications to other business 
school IT executives, they discovered 
a market for their homegrown systems. 

Smith didn’t jump right in, though. 
He and other Darden leaders consid- 
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ered whether they would be selling 
away a competitive advantage. But 
Smith says he learned from American 
Airlines Inc., which in the 1950s devel- 
oped SABRE, or Semi-Automated Busi- 
ness Research Environment, then 

the largest electronic data-processing 
system for business use. In the 1970s, 
American Airlines started marketing 
SABRE to travel agencies, and in the 
1990s spun it off as its own company. 

The Darden School followed a simi- 
lar route, and in 1998, it licensed the 
first application under the name Dard- 
en Solutions. Smith says he sees this 
arrangement more as a consortium. 
Schools pay Darden an initial licensing 
fee as well as annual maintenance fees. 
In return, the IT staff — Darden Solu- 
tions employs 15 developers who are 
separate from Darden’s internal IT 
workers — works on installations, con- 
figurations, a help desk and user con- 
ferences. Darden Solutions also pro- 
vides regular system improvements 
and worked on a $3 million investment 
in a second-generation product. 

Today, 17 academic institutions, 
including 15 of the country’s top 30 
business schools, use the product. 
Smith won't disclose how much money 
the agreements generate, but he says 
that Darden wouldn’t have such high- 
quality applications without that 
extra cash. 

“We decided we could have the best 
student systems by partnering this 
way,” he says. “This has been a suc- 
cessful venture, and it has value. And 
as we move forward, the university 
and school will continue to benefit.” 
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EVENTS 


ClO Academy 


@ Sept. 13-16, Boston 

Sponsor: Gartner Inc. 

Training sessions include topics 
such as dynamics of the CIO role, 
getting in sync with the CEO, setting 
the agenda and delivering results, 
managing people, leading enterprise 
change, chargeback, emerging tech- | 
nologies and risk management. 
www.gartner.com/2_events/ 
conferences/cio_academy/ 


overview.html 


SOA 


® Sept. 22-23, Washington 
Sponsor: BrainStorm Group inc. 
BrainStorm’s Service-Oriented 
Architectures Conference Series 
includes sessions on the role of 
technology, people, process and 
policies in SOA, maximizing the 
“A” in SOA, tying strategic intent 
to business outcome, developing 
an ROI for SOA and the business 
benefits of implementing SOA. 
www.brainstorm-group.com 


Sarbanes-Oxley 


@ Sept. 25-27, Baltimore 
Sponsor: The Institute for 
Financial Excellence 

Sessions at the Sarbanes-Oxley 
Conference and Exposition include 
lessons learned and future directions, 
enterprise risk management, compli- 
ance and bottom-line benefit, com- 
pliance through tax technology, the 
role of counsel in compliance, in- 
vestor perspectives, dealing with 
difficult times and difficult people, 
the liability landscape for corporate 
directors and compliance in Years 2 
and 3. www.sarboxconf.com/ 
eventdetails.asp 


CFO-IT 

@ Sept. 25-28, San Francisco 
Sponsor: CFO magazine 

Strategy Execution Tools and Tech- 
niques for CFOs includes sessions 
on the activist CFO and enterprise 
technology, the cost of network se- 
curity, outsourcing vs. shared ser- 
vices, CFO-CIO dialogue on gover- 
nance, IT governance and risk man- 
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agement, and building execution into 
strategy. www.cfo-tech-expo.com 
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‘Take Some Credit for 
Worker Productivity 


HE SUBJECT of improved worker produc- 
tivity in the context of IT investments al- 
ways makes me wince a bit. We all know 
that workers and companies are much 
more productive because of IT. (Just think 
back to the days before e-mail and the Internet.) Still, 
it’s getting harder to sell IT investments based on the 
promise of increased worker productivity. 
In the old days, productivity improvements were 
easy to see. Perhaps we had 10 clerks pushing paper in 


order to process corporate 
expense reports. Then we 
deployed an IT system and 
allowed employees to cre- 
ate expense reports elec- 
tronically. Rather suddenly, 
we needed only half of 
those clerks to complete the 
process. When IT replaced 
paper and manual labor, the 
productivity boosts of dis- 
crete IT investments were 
pretty obvious. 

Fast-forward to today. 
Now, we are likely to be op- 
timizing business processes 
that are already IT-enabled. 
Or we are deploying additional IT ca- 
pabilities to knowledge workers who 
already have an assortment of “per- 
sonal productivity” applications on 
their desks. So, let’s say we provide 
these knowledge workers with a new 
app that’s estimated to give them back 
30 minutes of time per day. Do those 
30 minutes really result in improved 
worker productivity? Or are those 
30 minutes that the worker will now 
spend reading e-mail he previously 
had to ignore? You see where I’m go- 
ing with this: It’s simply harder to see 
the benefits of discrete IT investments 
on worker productivity these days. 

Make no mistake. I’m not trying to 
say that IT doesn’t result in improved 
worker productivity. It most certainly 





does. In fact, a recent arti- 
cle in The Wall Street Jour- 
nal titled “Manufacturing 
Sector Shows Unexpected 
Vigor” (July 18) reported 
that production output 
from the nation’s manufac- 
turing sector is soaring, 
even as payrolls in that in- 
dustry are shrinking. Sim- 
ply put, the U.S. manufac- 
turing sector is producing 
more stuff with fewer peo- 
ple. Certainly, technology 
that’s deployed on the fac- 
tory floor is part of this 
equation. 

So, what do we do about the IT/ 
productivity conundrum? If we ignore 
the improved productivity that results 
from IT, we're overlooking a key bene- 
fit. But how can we broach the subject 
in a way that doesn’t require a Ph.D. in 
economics? 

I think the problem lies in trying to 
equate individual IT investments with 
improved worker productivity. That’s 
difficult (perhaps impossible), and 
most CIOs have neither the time nor 
the inclination to try. I believe that a 
more obvious and more meaningful 
way to get a handle on the benefits 
of IT is to look at how it affects the 
overall efficiency of the company. 

Here’s a simple exercise you might 
consider to get the conversation about 





worker productivity going in your 
organization. 

1. Calculate the revenue per em- 
ployee generated by your organiza- 
tion by dividing the company’s gross 
revenue by the number of employees. 
If it is privately held, you can usually 
obtain revenue estimates from 
www.hoovers.com. If you work in a 
not-for-profit or public-sector organi- 
zation, use the overall operating bud- 
get of the organization as a proxy for 
revenue. The number you obtain is 
essentially a measure of your organi- 
zation’s productivity (the amount of 
revenue produced per employee). You 
can now track this number over time 
and see how it changes when certain 
IT investments are made. 

2. Calculate the average revenue per 
employee for your competitors (or 
counterpart organizations). This will 
allow you to compare your company’s 
productivity to theirs. 

This simple exercise can be very 
telling. For example, I once worked 
with a pharmaceutical firm whose ex- 
ecutives were alarmed because it was 
spending nearly $30,000 per employee 
per year on IT. This was almost three 
times the industry average. When we 


| calculated the firm’s revenue per em- 


ployee, however, it was hovering 
around $1 million per year — also 
about three times the industry average. 
While this analysis wasn’t 100% con- 
clusive, it suggested that the firm was 
significantly more productive than its 
peers and that it had achieved that 
boost by investing more money in IT. 

If you haven’t already picked up the 
worker productivity issue, it’s time to 
start. Companies are seeing big gains 
in worker productivity, and that’s due, 
at least in part, to IT. So now that 
you've got a way to measure it, step 
up and take some credit. @ 55783 
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EDITOR’S NOTE 


EN YEARS AGO, programming wasn’t easy, but the 

task was relatively straightforward: You wrote 

code to meet the requirements document, the 

little bit of collaboration you did was with IT 

people just down the hall, and regulators hadn’t 
discovered IT process controls. Now, as the Disney song 
says, it’s a whole new world. In this special report, we’ve 
identified three megatrends that are dramatically chang- 
ing the way application development teams work. 

1. The emergence of the service-oriented architecture requires 
a lot more attention to code reuse and closer ties to the business. 
You've heard it before, but this time it’s for real. “The 
biggest chore has been getting people to have a reuse 
mind-set,” says Mike Missler, program manager of the 
reuse initiative at Sabre Holdings. 

2. Team members may be hundreds or thou- 
Wa sands of miles away. You get the best talent, 
ey ee ee wherever it resides, but managing the 
To eceutiiem project can be a nightmare without the 
ee right tools and processes in place. 
he) a ay 3. Regulators, auditors, testers and business 
managers are pulling developers in different 
directions. New compliance work is making IT projects 
take 15% to 20% longer, while the business managers fret 
about “speed to market.” 

In the following articles, you'll learn how IT leaders are 
dealing with these new pressures on the application de- 
velopment group. Hopefully the useful insights will drive 
that saccharine Disney song out of your head. @ 55768 
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“The biggest chore has been getting people to have a reuse mind-set. Most developers would rather develop from scratch. 
See BRU MCs \ LS) ’, program manager of the reuse initiative at Sabre Holdings Corp. 


a S PART OF its 2-year-old 
effort to move legacy 
mainframe systems to a 
service-oriented architec- 
ture (SOA), Sabre Hold- 
ings Corp. in May began 
dispatching “reuse advo- 
cates” to work closely with all of its 
development groups. The goal was to 
encourage developers to tap the travel 
company’s growing registry of services 
for new projects. 

These advocates are typically senior 
quality assurance or other technical 
leads identified by their managers as 
people most likely to influence devel- 
opers to adapt to changes inherent in 
building an SOA. 

“The biggest chore has been getting 
people to have a reuse mind-set,” says 
Mike Missler, program manager of the 


reuse initiative at the Southlake, Texas- 


An emphasis On reuse 1S based company. “Most developers 


would rather develop from scratch. 


changing the way developers | “ioreriestis Ste ons 
* 


gaining traction, bolstered by advo- 


work. By Heather Havenstein | ssvzuiisesns"s 
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encourage them to add their own work 
to the registry. 

Missler meets biweekly with the 
reuse advocates to gain feedback on 
their work with developers; he also 
presents awards to developers who 
have contributed reusable business 
logic and other assets to the registry. 

Sabre has also engaged its develop- 
ment project managers to tout the 
reuse of application components tied 
together as services, Missler adds. In 
addition, the requirements phase of 
development projects now includes an 
assessment of opportunities to reuse 
components of the project. 

Over 70% of companies with more 
than 20,000 employees are adopting 
SOAs, according to an April report by 
Forrester Research Inc. As SOAs take 
hold in many large enterprises, devel- 
opers are faced with a paradigm shift 
away from traditional programming. No 
longer can they develop one-off appli- 
cations from scratch to be abandoned 
after they successfully make their way 
through testing and quality assurance. 

Instead, developers must adapt to 
more closely aligning IT with the busi- 
ness. Instead of writing new code for 
an isolated application, developers now 
often must link — and sometimes make 
daily changes to — existing business 
processes that may live in applications 
from disparate lines of business. SOAs, 
by default, require developers to work 
with the business as they develop these 
new composite applications — loosely 
coupled applications that can be tied 
together, then uncoupled as needed 
and reused across the enterprise. 

Indeed, SOAs are the catalyst for 
true alignment between business 
and IT, says Forrester analyst Randy 
Heffner, as IT moves out of the realm 
of “order takers” to a more collabora- 
tive relationship with the business. 

“IT has typically measured itself 
from ‘Did we deliver on time and on 
spec and on budget?’ You can do all 
those things and not deliver business 
value,” Heffner says. “With services, 


we have finally brought the design par- | 


adigm up to a level where IT and the 
business can talk the same language. 
The business-IT dialogue starts with 
the business problem and not with the 
requirements document.” 


Changing the Mind-set 

The move toward SOAs requires a “re- 
orientation of the thought process” as 
opposed to new skills for developers, 
says Matt Miszewski, CIO for the state 
of Wisconsin. The state is now over- 
hauling its main portal, with a mandate 
not to deploy any objects that can’t be 





Programmers 
oolbox 


ALTHOUGH MANY SAY developers 
must embrace a new way of thinking as 
they embark on the road toward SOAs, 
there are tools that can help make the 
transition easier. 

For example, Sabre’s reuse advocates 
are working to steer developers to the De- 
veloper Resource Center, which is a reg- 
istry of its Web services, components and 
other software assets based on technol- 
ogy from Cleveland-based Flashline Inc. 
Developers from Sabre subsidiary Trave- 
locity.com LP and its airline and travel net- 
works can tap more than 80 Web services 
that provide access to data like airline fulfill- 
ment and reservations content that's 
housed in legacy mainframe systems. 

“Flashline allows us to tie this informa- 
tion together in a very user-friendly envi- 
ronment that developers can use to get 
services data - lists of what we offer and 
how to get support,” says Brandon Steele, 
Sabre’s lead business-systems analyst. 

Blue Cross and Blue Shield of Massa- 
chusetts Inc. is using business process 
management tools from SeeBeyond Tech- 
nology Corp. (which Sun Microsystems 


reused within other services, he says. 

“Instead of developing a line-of- 
business application for the Depart- 
ment of Revenue, I am developing a 
system, but it will be made up of these 
components that can be reused,” ex- 
plains Miszewski. “They are coding 
objects instead of whole systems.” 

The state has eased this shift with top 


executive buy-in, he says. All the deputy 


secretaries meet regularly to identify 
where they can create services — like 
a service to process credit cards — to 
be used across the state’s 50-plus agen- 
cies. Miszewski also has regular brief- 
ings with the development staffers, 





Inc. has announced plans to acquire), 
coupled with IBM's MQSeries messaging 
backbone to anchor its SOA, which in- 
cludes Java and Web services for looking 
up claims and customer information. 

Tools in SeeBeyond’s Integrated Com- 
posite Application Network suite provide a 
graphical layout and flow designer, that lets 
developers generate composite applications 
with limited programming, says Stephen 
Edens, enterprise integration architect at 
the Boston-based health care provider. 

The tools help developers transition 
from just focusing on requirements and 
use cases to looking at workflow, he adds. 

“Each box represents a step in work- 
flow or process. The idea of SOA is, don’t 
prejudge that the box is going to be a re- 
quest to IBM CICS or another back-end 
system,” Edens says. “You're designing 
business processes first [while] looking at 
the rules and their requirements. You have 
to help developers to understand the 
blending of business process manage- 
ment and requirements management into 
traditional software engineering.” 

Fidelity Information Services Inc., a 
Jacksonville, Fla.-based company that pro- 
vides processing and information services 
to financial and real estate companies, is 
using Oracle Corp.'s BPEL Process Man- 
ager to help it quickly develop business ser- 
vices like looking up customer information. 

The tool also helps developers orches- 
trate business services - such as ensuring 
that transactions are made in the correct 
order — based on predefined business 
rules, says Amanda Mcintyre, Fidelity’s 
vice president of product management 
and business analysis. 

- Heather Havenstein 


which has helped them embrace the 
SOA philosophy. “Developers are ex- 
cited by this. They can concentrate on 


adding pure value, not just building an- | 


other shopping cart,” he says. 
Waregem, Belgium-based TVH 
Group, which manufactures and ser- 
vices forklifts, has been moving toward 
an SOA since the late 1990s. With mes- 
saging technology from Sonic Software 
Corp. and software from Progress Soft- 
ware Corp., TVH has used an SOA to 
integrate internal applications and link 
with external partners, says Kalman 
Tiboldi, TVH’s information and com- 
munications technology manager. 





As part of that effort, the company 
split its IT department in 2001. Sup- 
port staffers for networking and hard- 
ware were kept in IT, while developers 
were dispatched to lines of business, 
including supply chain, warehouse and 
customer relationship groups, to begin 
working directly with business people. 

“The IT point of view was needed to 
implement flexibility — to dynamically 
change business rules,” Tiboldi says. 
“We are getting the business flowchart 
from the business people — step by 
step how the job has to be done. IT is 
involved daily to change the process if 
needed. You are able to dynamically and 
flexibly change your business model to 
the daily needs of the business.” 


Map to the Future 

Danske Bank AB in Copenhagen has 
been operating a homegrown SOA 
since 2000. Today, it has about 2,000 
reusable functions available for devel- 
opers and 100 to 150 composite appli- 
cations in production, says Claus Torp 
Jensen, the bank’s vice president of ar- 
chitecture and development strategy. 

Technology aside, Torp Jensen says 
that one of the bank’s biggest chal- 
lenges has been to help developers find 
the best reusable functions for busi- 
ness requirements. The bank devised a 
development model that includes busi- 
ness process management modeling to 
identify the best solution for the busi- 
ness and a parallel process to analyze 
possible future applications of the ser- 
vices built for a particular project. 

The result is a services map — a lay- 
out of the building blocks the company 
expects to be able to leverage in future 
projects. For example, architects and 
developers could refer back to the map 
containing a service for verifying the 
identity of customers and then add the 
ability to check the identity of a partner 
to that service, instead of developing a 
new one, Torp Jensen says. 

“I can give a programming team a set 
of descriptive models and tell them, 
‘This is what you are going to create,’ ” 
he explains. “They have to code the 
pieces and not invent the structure.” 

Danske Bank plans to add modeling 
tools from IBM’s Rational Software 
unit by the end of the year to help the 
company automate some of its map- 
ping efforts, Torp Jensen adds. 


@ 55453 
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It takes both tools and 
processes for developers to 


collaborate lon 
By Drew Robb 


e-distance. 


T’S GREAT BEING ABLE to draw 
upon your best programmers from 
throughout the world. SimSci-Ess- 
cor, the industrial process simula- 
tion and control unit of Invensys 
PLC, will assign personnel from any of 
its offices to assemble the right team. 

“Our development projects operate 
in a virtual mode and [gather] people 
from multiple sites based on project 
needs,” says Joe Ayers, director of de- 
velopment services at SimSci-Esscor 
in Lake Forest, Calif. “It is common for 
projects to utilize developers from 
three different time zones in a ‘follow 
the sun’ development mode.” 

The approach allows Invensys to 
find the right talent for the project, 
and work is done in an efficient way. 
But managing those far-flung develop- 
ers can be a nightmare. 

“Invensys had brought together 
multiple companies with different cul- 
tures and processes,” Ayers explains. 
“Some of the issues we have had to ad- 
dress include duplication of source 
code, multiple tools and processes in 
use, and limited network connectivity 
and reliability.” 

To tackle these issues, Invensys cre- 
ated a virtual development infrastruc- 
ture for 135 developers in five loca- 
tions. To facilitate communication, it 
incorporated desktop-sharing tools, 
instant messaging, conference calling 
and voice-over-IP technology. 

For working on the code itself, the 
company deployed three products 
from Telelogic AB in Malmo, Sweden: 
Synergy/CM for controlling project- 
configuration items, Synergy/Change 
for controlling change requests, and 
Synergy/Distributed CM for synchro- 
nizing change requests and source 
code between databases at multiple 
sites. It also implemented a wide-area 
file-sharing system from Availl Inc. in 
Andover, Mass., for other documents. 

“With this devel- 
opment structure, 
we have the ability 
to add or remove 
changes to soft- 

ware builds at the 
last minute, with no project-deliv- 
ery slips attributed to distributed devel- 
opment complexity over the last year,” 
says Ayers. “We've been able to lower 
project start-up time and project costs.” 

Experts say managing distributed 
development teams requires a mix of 
processes and tools. “Rarely is it a 
problem with the technology, though 
that used to be a major hurdle in the 
past,” says Dale Karolak, vice president 
of product development at Intier Auto- 
motive Inc. in Novi, Mich., and author 





of Global Software Development: Man- 
aging Virtual Teams and Environments 


| (Wiley-IEEE Computer Society Press, 


1998). “Most problems now are with 
communications, documentation and 
alignment.” Intier is a subsidiary of 
Magna International Inc. 

Karolak says managers need to exert 
more discipline when it comes to 
scheduling and holding meetings and 
tracking project targets and spend 
more time visiting off-site locations for 
face-to-face meetings. Proper manage- 
ment also requires a greater awareness 
of potential problems. 

“Jump on problems right away. Don’t 
wait,” Karolak says. “Longer distances 
will cause longer delays in solving the 
issues if they are not addressed quickly.” 

Karolak manages small teams of en- 
gineers who work on automotive elec- 
tronic-control units. Each type of car 
from Intier’s customers requires its 
own unit. Three to five engineers form 
a team, and there are about 40 teams in 
total. Karolak has implemented a soft- 
ware configuration management sys- 
tem to track changes and ensure that 
the right version goes into the finished 
product. He also has a product data 
management system for documentation. 


Managerial Skills 

For Olaf David, a computer scientist 
at the Department of Agriculture’s 
Agricultural Research Service in Fort 
Collins, Colo., the problem was creating 
a system for developers who weren't 
under his administrative control. In 
addition to the USDA employees at 
several locations, university research- 
ers do much of the development. That 
resulted in pockets of code around the 
country with shoddy version control 
and backup. 

To improve the situation, David 
installed Intland GmbH’s Code- 
Beamer collaborative and change 
management software, along with 
the open-source Subversion version 
management system. 

One reason for choosing Code- 
Beamer was that it used Web pages 
for access, so data could pass through 
agency firewalls. After a successful 
pilot, 50 projects were loaded into the 
system, and another 80 are scheduled 
to be added. 

Project managers use CodeBeamer 
to assign users access to the project 
code stored in Subversion without 
having to go through IT. 

“I get a lot less e-mails now,” says 
David. “But more than that, it gives us 
better project management control. 
We can track progress, assign tasks, 

Continued on page 38 
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see which tasks are open or closed and 
how many hours are left before a task 
is done.” 

In addition to the general communi- 
cation and collaboration tools, there are 
others that address specific aspects of 
the development process. The exact 
mix will vary, depending on the needs 
of a particular organization, but here’s a 
sampling of the options and how differ- 
ent companies are using them. 


CODE REPOSITORY: HSBC Holdings 
PLC, a London-based banking group, 
has developers on five continents ser- 
vicing offices in 77 countries and terri- 
tories. It uses IBM’s Lotus Notes and 
WebEx Communications Inc.’s WebEx 
for virtual meetings, and software con- 
figuration management tools and 
Flashline Inc.’s Flashline Registry to 
manage the code elements. 

“The Flashline application resides 
on our intranet and allows any of our 
employees to find and use our custom 
software assets,” says Jim Kasmer, 
reuse champion on HSBC’s technical 
architecture team. With Flashline, the 
group can find documents within its 
configuration management tools and 
on other intranet sites. 


APPLICATION SIMULATION: Human re- 
sources and capital management con- 
sulting firm Watson Wyatt LLP has 50 
developers at its headquarters in 
Reigate, U.K., and others at its branch 
offices in 32 countries. The problem it 
faced wasn’t creating the software, but 
getting agreement on the needs of 
users around the world. To speed the 
process, the company uses iRise Inc.’s 
application simulation software to 
model different versions of proposed 
interfaces without having to actually 
work with the source code. Users can 
then access them via a Web browser. 
Melvin Brandman, Watson Wyatt’s 
head of IT, says the software has 
helped the company eliminate ambigu- 
ity in the design stage, speed develop- 
ment and reduce the amount of re- 
work. It also helped when the company 
farmed out a job to an outsourcer. 
“With one of our projects, we have 
been able to engage an external suppli- 
er to produce a system for us, having 
given them a functional model of the 
interface,” he says. “We can now have a 
high degree of confidence that there 
will be no big surprises when we get to 
see the real system for the first time.” 


DEFECT TRACKING: The bulk of Verizon 
Communications Inc.’s developers for 
its SuperPages.com site are in Coppell, 
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Open-Source Lessons 


“OPEN-SOURCE DEVELOPMENT is having a huge impact on 
corporate IT because it has been successful,” says Liz Bar- 
nett, vice president of Forrester Research Inc. 

But a great deal of that success has been accidental. For- 
mer Linux server vendor VA Linux, now VA Software Corp. in 
Fremont, Calif., needed to boost its hardware sales and de- 


cided to try a different approach. 


“As we tried to expand our business, the challenge was that 
we didn't have a large portfolio of third-party applications,” 
says VA Chief Technology Officer Clint Bodell. “Instead of try- 
ing to build or buy third-party applications, because of our 
affinity with the open-source community, we said, ‘Why not try 
to encourage them by providing the technology to bring them 
along?’ ” Out of that decision came the SourceForge.net site. 

“We didn’t know what a phenomenon it would be,” Bodell 


hoped they would do well. It took off like a rocket.” 

On May 17, the site passed the 100,000-project mark and 
had more than 1 million registered users. While this model 
was extremely successful for open-source projects, it wasn’t 
designed for developing proprietary code. Bodell says three 
companies - Hewlett-Packard Co., Goldman Sachs & Co. 


and Agilent Technologies Inc. - independently approached 


hind their firewalls. 


adds. “We figured we would put a few projects on there and 


Texas, but a quarter of them are near 
Boston. They use Microsoft Corp.'s 
Project Server 2003 for product man- 
agement and Quest Software Inc.’s Stat 
ACM for change management on the 
PeopleSoft CRM suite. Seapine Soft- 
ware Inc.’s TestTrack Pro is used by 
approximately 100 developers to keep 
track of any defects and manage 
change requests; another 400 employ- 
ees can submit bugs or change re- 
quests through the system. 

“Trying to keep everyone in the loop 
using e-mail was cumbersome, and in- 
evitably someone would be left out,” 
says capacity planner Roy Minney. 
“With TestTrack Pro, we are able to 
highly customize the workflow routing 
criteria and automatically notify the 
appropriate parties.” TestTrack Pro 
links into Stat ACM for deployment of 
the new code when ready. 


PROBLEM REPLICATION: IT services 
firm CGI Group Inc. in Montreal as- 
signs 700 of its 25,000 employees to 
support one of Canada’s largest tele- 
communications providers. The staff 
is located primarily in Toronto, Ottawa 
and Montreal, and sometimes devel- 
opers from CGI’s offices in India are 
brought in. 

When there’s a problem, appropriate 
specialists from the different offices are 
assembled into an ad hoc team for 
rapid resolution. To ensure that they 
are all looking at the same version of 
the question at hand, they use Identify 
Software Ltd.’s AppSight, which records 
what’s happening with a database, ap- 
plication and the user in a buffer. When 
there’s a problem, it dumps the data 
into a log file for analysis. 

“Before, we had environmental or 
operational or ‘lost in translation’ is- 





sues when trying to re-create a prob- 
lem, and a lot of time was wasted,” says 
David O'Leary, director of CGI’s Cen- 
ter for Testing and Quality. Now, all 
members of the team, no matter where 
they are, can look at the same set of 
data, replay it, drill down into the exact 
user keystrokes and lines of code run- 
ning at that time, and work out a fix. 


LICENSE COMPLIANCE MANAGEMENT: 
Mixing open-source and proprietary 
code in a product puts a company at 
legal risk. “Programmers are always 
looking for ways to not write code and 
instead use what already exists, so they 
all look at open-source repositories 
whenever possible,” says Jothy Rosen- 
berg, chief technology officer at Ser- 
vice Integrity Inc., a management soft- 
ware vendor in Lexington, Mass. 
“They are pretty careful, but it’s not 
easy to be sure if the license on that 
particular module is clean.” 

Microsoft indemnifies its customers 
against challenges to its software, and 
other companies sell insurance to pro- 
tect users against lawsuits. Rosenberg 
uses instant messaging, phone calls 
and e-mail to manage his developers, 
Perforce SCM from Perforce Software 
Inc. to control the source code, and 
ProtexIP from Black Duck Software 
Inc. to verify that code is clean. 

“With the litigation going on, this is 
becoming essential,” he says. “Our ven- 
ture capitalists now require that we in- 
demnify them that we do not have any 
open-source license violations, and the 
bigger the company, the more critical 
this becomes.” 

Erran Carmel, a professor at Ameri- 
can University in Washington and au- 
thor of Global Software Teams (Pren- 
tice Hall, 1998) and Offshoring Informa- 





VA to obtain a copy of the SourceForge software to run be- 


Out of this came VA's SourceForge Enterprise Edition, 
which runs on a different set of code than the Source- 
Forge.net site but uses a similar approach to collaboration. 
It does, however, have greater security, confidentiality and 
better integration with other development tools. Users can 
choose between a Web or Windows interface. 


- Drew Robb 


tion Technology (Cambridge University 
Press, 2005), has been following the 
collaboration tools market for the past 
decade and says they are key to the 
boom in global development. 

“We wouldn’t be seeing this world 
of global collaboration without these 
tools, the Internet and very low-cost 
phone calls,” he says. The tools are 
much better than what was available 
five or 10 years ago, Carmel says, but 
they won’t solve the problems of a dys- 
functional organization. 

“Tt is not just the tool itself but the 
whole organizational layer around the 
tool,” Carmel says. “It is how well the 
tool is used, how religiously everybody 
is updating the information, clicking 
all the boxes and making sure every- 
thing is linked properly.” 

One barrier to widespread use is a 
tool that’s too complex. Karolak says 
collaboration tools need not be exotic. 
Much of the job can be done with 
readily available IM, Web and video- 
conferencing technology, e-mail and 
phone calls. But if you do select a dedi- 
cated distributed development tool, 
don’t go overboard on the features, 
Karolak says. 

“The most easily accessible and easi- 
ly used ones will be used more often 
and be more effective,” he says. “Sim- 


plicity rules.” @ 55458 





Robb is aComputerworld contributing 
writer in Los Angeles. Contact him at 
drewrobb@attbi.com. 


JUST BLOG IT 


ECourier Ltd., an express courier company in London, 
was able to coordinate application developers in three 
countries with weblogging tools: 
QuickLink 54663 
www.computerworld.com 
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Multi 
Tas 


With an array of users and auditors tugging at them, 
developers are feeling the strain. By Thomas Hoffman 


KNOWLEDGE CENTER DEVELOPMENT 


HESE DAYS, corporate 

programmers are being 

pulled in different direc- 

tions by business spon- 

sors, IT executives and 

quality assurance man- 
agers, as well as internal and exter- 
nal auditors and regulators. 

“There’s a constant drumbeat from 
the business to deliver new features 
and capability into the field,” says 
David Moore, director of North 
American branch operations ser- 
vices at Boston-based Keane Inc. 
Then there are demands from inter- 
nal quality-assurance groups for ade- 
quate testing and inspections. Throw 
in the Sarbanes-Oxley Act and other 
regulatory requirements, and “all of 
these forces converge on the devel- 
opment team,” adds Moore. 

Developers also have to sharpen 
their understanding of business re- 
quirements while they’re under the 
gun to create new systems faster, 
notes Jack Duggal, a principal at 
Projectize Group, a Simsbury, Conn.- 
based project management consult- 
ing firm. “There’s definitely a lot of 
pressure on them.” 

To help deflate that pressure, some 
IT organizations are positioning their 
project management offices as buffers 
between developers and other con- 
stituents. At American Cancer Soci- 
ety Inc., the PMO acts as a liaison be- 
tween business managers and devel- 
opers “so that they’re not being bom- 
barded with phone calls,” says Tom 
Nodar, PMO manager for corporate 
IT at the Atlanta-based voluntary 
health organization. 

A similar method is employed at 

Cardinal Health Inc. “We 
try to use project man- 
agers to insulate de- 
velopers from status 
reporting and all of 
the day-to-day busi- 
ness pressures,” says 
Dave Hammond, vice 


www.computerworld.com 


| president of enterprise architecture 
at the $65 billion health care prod- 
ucts provider in Dublin, Ohio. 

Cardinal’s IT group has taken 
other steps to help insulate develop- 
ers. For example, it’s putting together 
teams of programmers and applying 
agile project management method- 
ologies instead of waterfall develop- 
ment methodologies when there’s a 
good fit for the people involved and 
the projects being worked on, says 
Hammond. 

“What we want to do is try to put 
developers back in the driver’s seat 
as much as we can,” he says. 

Other organizations, such as ING 
Americas, simply have project man- 
agers act as middlemen between de- 
velopers and business sponsors. But 
sometimes even those steps, along 
with the use of structured project 
management methodologies, go only 
so far toward shielding developers 
from other demands. 

“IT management has taken suffi- 
cient steps to address these issues, 
but developers will always feel like 
they’re being pulled in different di- 
rections,” says Joe Muller, chief in- 
formation architect at ING Americas, 
a financial services provider in Hart- 
ford, Conn., that employs 1,000 in- 
house and contract developers. That’s 
partly the result of increased security 
and Sarbanes-Oxley-related require- 
ments being imposed on all develop- 
ment efforts, says Muller. 


Establishing Structure 


Like other IT organizations, Arizona 
Public Service Co. uses a structured 
project management methodology 
that lends discipline to how each IT 
project gets staffed and funded, says 
Brian Moore, an information systems 
account manager at the Phoenix- 
based utility. Within that is a struc- 
tured application development 
methodology that allows the utility’s 
80 in-house developers to choose 





asters 
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The Buffer Zone 


SCHNEIDER NATIONAL INC. might 
be a transportation carrier, but from a 
development standpoint, it acts more 
like a software vendor. 

For instance, the Green Bay, 
Wis.-based company schedules new 
software deployments about three 
times a year, says Bob Grawien, vice 
president of application development. 
In addition, Schneider National 
schedules maintenance releases 
between each of those deployment 
phases. 

To help insulate its 500 full-time 
and contract developers, the compa- 
ny has established a 10-person 
product management team that 
operates separately from the applica- 
tion development group and serves 
as the primary interface with busi- 


how they design a system, as long as 
it’s compatible with the utility’s appli- 
cation development architecture, says 
Moore. “I found our programmers like 
having the structure, since it leads to 
the continuity of the systems we have 
in place,” he says. 

A structured project management 
methodology launched by HVB Amer- 
ica Inc. early last year has provided the 
bank with clear segregation of project 
management responsibilities, says 
David Dart, managing director and 
CIO at the New York division of HVB 
Group, a Munich-based financial ser- 
vices firm. 

Using this framework, HVB’s devel- 
opers have to focus only on project 
specifications, “and they don’t have 
to feel like they’re being blindsided” 
with other requirements, such as user- 
acceptance testing, Dart adds. 

Idaho Power Co. implemented an 


Joseph Gwozdz, 
PROGRAMMER/ANALYST 


It's been about eight months since Joseph 
Gwozdz gave up his small IT consulting 
business and joined Scarborough, Maine- 
based grocer Hannaford Brothers Co. as a 
programmer/analyst. But he continues to 
rely on the consultants with whom he forged 
friendships to help him cope with day-to-day 
pressures 


“We talk about ways of doing more with 
less,” says Gwozdz. “It's making it easier for 
me to survive in an environment where 
there's always more to do.” 





ness sponsors on setting project 
requirements. 

“What they focus on is the ‘what’ 
versus the ‘how’ of what we're going 
to do,” says Grawien. So after work- 
ing with business sponsors to devel- 
op broad systems requirements, 
the product team then works with 
developers to establish what they 
need to do. 

The approach has brought a great 
deal of discipline to Schneider Na- 
tional’s project efforts while keeping 
developers focused on their roles. 

“Five years ago, it wasn’t uncom- 
mon for a business sponsor to call a 
developer and ask for a favorite en- 
hancement,” says Grawien. “We've 
all but eliminated that.” 

- Thomas Hoffman 


application system life-cycle method- 
ology last October. The methodology 
has helped ease the amount of docu- 
mentation that developers have to con- 


| tend with as a result of regulatory 


compliance and its own quality assur- 
ance requirements, says Paul Schinke, 
technology asset manager at the Boise- 
based utility. 

The development methodology has 
helped Idaho Power, since it previously 
had to increase the amount of docu- 
mentation associated with its applica- 
tion development efforts, such as 
signed test reports, to help it improve 
the quality and scope of its IT projects, 
says Schinke. “Even though there’s a 
little extra time spent on documenta- 
tion, there are improvements in the 
project timelines,” he adds. 

But the additional discipline that 
software development life-cycle 


| methodologies entail poses a catch-22 


As part of his new role, Gwozdz has 
been asked by Hannaford CIO Bill Homa to 
modify a software development life-cycle 
(SDLC) methodology inherited from Food 
Lion, one of Hannaford’s sister companies, 
and apply that to its Sarbanes-Oxley compli- 
ance efforts. The work inciudes examining 
the impact that even a $50,000 upgrade to 
an accounting system might have on Han- 
naford’s adherence to the federal regulations. 

Once the company implements a modified 
set of SDLC processes by October, it will se- 
lect software tools to help automate project 
workflows and other development compo- 
nents, says Gwozdz. 

~- Thomas Hoffman 





for developers. “Some degree of disci- 
pline is necessary, but not to the point 
of being rigid” about processes, says 
Projectize Group’s Duggal. 

Others believe the additional struc- 
ture benefits developers. “Program- 
mers are very logical. They like a very 
clear, logical structure of when to do 
what,” notes David Myers, director of 


project management at Solo Cup Co. in | 


Highland Park, Ill. 

Schinke says some of Idaho Power’s 
developers have resisted the bureau- 
cracy that comes along with a struc- 
tured project management methodolo- 
gy. “It’s a double-edged sword: As a 
developer, you’re adding more docu- 
mentation to my workload and taking 
away from my code development time, 
but they find the structure helpful,” 
he says. 

Idaho Power has an initiative under 
way to streamline the amount of docu- 
mentation that developers will have to 


| contend with, says Schinke. The new 


processes are expected to be in place 


| by early 2006, he says. 


Time Trade-off 


Increased security, regulatory compli- 
ance and quality assurance require- 
ments are all causing IT projects to 
run 15% to 20% longer than they did 


| two or three years ago, several IT man- | 


agers say. Just where that extra time 
ends up in a project life cycle varies 
from one organization to the next. 

For instance, documenting IT con- 
trols to meet Sarbanes-Oxley require- 
ments has led to longer systems testing 
and deployment phases at Cardinal 


| Health, says Hammond. 


In turn, that has led to some frustra- 
tion among business sponsors, because 
the Sarbanes-Oxley compliance work 
needed for Cardinal’s accounts man- 
agement system “had a trickle-down 
effect on other projects getting serial- 
ized by SOX,” says Hammond. 


At Idaho Power, regulatory and qual- | 
| plenty of things that developers can do 


ity assurance requirements extend the 
front end of projects by adding more- 
detailed project definitions, says 
Schinke. “But overall, it makes the 
projects go better, since we're giving 
the customer a more fixed schedule 
and we’re not overpromising on what 
we'll deliver,” he says. 
Communicating these additional re- 
quirements to the business can also be 
tricky. “If you shirk on testing or quali- 
ty assurance to shorten development 
cycles, the project is going to be at 
risk,” says the American Cancer Soci- 
ety’s Nodar. “So when you’re commu- 
nicating this to the project sponsor, if 
they want it done faster, then we tell 
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PROTECTING 
mW Li laics 


project work such as technical 
documentation. Their strong suit is 
development. 


Set up expectations upfront with 
business sponsors. 


Recognize that programmers 

may get derailed from develop- 
ment efforts as a result of unforeseen 
events, such as a maintenance prob- 
fem for another system they previously 
developed. 


Find and implement automation 
tools to heip developers with 
additional regulatory and security 
requirements. 
Gradually phase in new project 
management life-cycle and 
quality assurance methodologies, 
recognizing the amount of time it takes 
for your organization to accept change. 
Ask programmers how project 
: management methodologies 
might stifle development. 
- Thomas Hoffman 


| them, ‘These are the risks that are as- 


sociated with it.’ ” 
At Solo Cup, business sponsors want 


; to know when developers are actively 
| writing code, says Myers. “But in terms 
| of our time, that may only be the sec- 


ond half of the project,” he says. “The 
first 35% to 40% of the [project dura- 
tion] might be spent before any code 
is written.” 

Besides steps that IT managers can 
take to insulate developers, there are 


to protect their own interests. “Devel- 
opers tend to learn from tribal knowl- 
edge and what trade-offs they can 
make,” says Keane’s Moore. “And they 
quickly learn how to deal with that pres- 
sure, partly by cutting corners on docu- 
mentation and rigorous unit testing and 
other things that are outliers in the core 
development process.” @ 55880 


BAKED-IN SECURITY 


It’s a problem at many organizations today: 
Developers are so narrowly focused on quickly 
building feature-rich applications that security 
becomes an afterthought: 
QuickLink 52583 
www.computerworld.com 
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Big Business 


BASE: 116 North American companies 
SOURCE: Forrester Research Inc., 
Cambridge, Mass., April 2005 


Snowball Effect 


Is your organization 
developing Web services? 


Bela nis 
vet] 14% 


ae Lerel tale] 
ya) 


| | 

| | 

|__ Not interested 9% 
—— Don't know 7% 


BASE: 966 respondents to an online survey 
SOURCE: Computerworld.com, December 2004 


Dealing With 
Deficits 
What are the biggest hurdles 


you face in implementing 
Web services? 


[EB Lack of corporate priority 
BASE: Survey of 400-pius developers 


SOURCE: Evans Data Corp., 
Santa Cruz, Calif., June 2005 


MARK HALL 


A Soft Touch 


WAS HAVING DINNER LAST MONTH IN SAN FRANCISCO with an IT manager at 
a midsize law firm in the area. He was telling tales about his IT chief. 
“His style is unbelievable,” the IT manager told me. “He yells or mocks you if 
you're not doing exactly what he wants you to do. He screams, ‘You’re not asking 
questions the right way. You’re not thinking the right way. You have to change the way 


,” 


you're thinking. 


The fellow looked at me across the table, cursed his boss, then said, “Change my 
thinking? I wouldn’t change my socks for that guy.” 

Stinky feet aside, my dinner companion’s comments bring to mind how management 
style — what some people call the “soft skills” of running an IT shop — is critical 
when you want to impose a sea change in the way work gets done. And in IT these 
days, the biggest change is happening in application development with the arrival of 


reusable Web services. 


As Heather Havenstein reports on page 34, IT man- 
agers are challenged to get programmers to revise 
their attitudes about writing application code. I think 
the foot-dragging among programmers stems from 
two intangible forces. The first is the pleasure devel- 
opers derive from their work. The second is a long- 
held cynicism about the long-term success of software 
interoperability standards. 


Are We Having Fun Yet? 


People who write code simply like the 
process of creating software. It’s challeng- 
ing and personally rewarding. That’s why 
you get top executives like Microsoft’s Bill 
Gates and SAS Institute’s CEO, Jim Good- 
night, who still can’t resist the fun of unrav- 
eling the complexity of a tough program- 
ming problem and continue to write code 
for their respective companies’ commercial 
products. There’s something wonderfully 
gratifying about doing it right. And it’s diffi- 
cult for people like this to give up the con- 
trol of building an application from scratch. 

Also, Web services isn’t the first effort to 
bring code reuse to the world of developers. 

Those past experiences make many developers suspi- 
cious about the prospects for success this time around. 
They remember the failed promise of object-oriented 
programming in the 1980s. Back then, the goal was to 
create a bunch of objects in C++ or Smalltalk and toss 
them together with standard middleware to create ap- 
plications. More than 20 years later, we’re doing the 
same thing, although instead of calling the bits of code 
“objects” we now call them “services.” 

Back in the heyday of object-oriented programming, 
Microsoft gummed up the middleware works, zigging 
and zagging across the software development land- 
scape and tossing around “standards” such as COM, 
DCOM and COM+ to combat broader industry initia- 
tives like CORBA. In those days, Microsoft’s strategy 





and its power in the market undermined the standards 
effort to create a middleware glue to make object- 
oriented programming practical for most companies. 
Microsoft’s success was the industry’s failure. 

This time, though, it’s different. This time, Micro- 
soft is on board with the reusable software movement 
we call Web services. But I suspect there are more 
than a few cynics (I’m sure they call themselves real- 
ists) who believe Microsoft has built a “gotcha” into 
the whole Web services effort with its .Net agenda. 

They fear another waste of effort once 
that gotcha is exposed. 

Overcoming the pleasure developers 
get by programming applications from 
scratch, and healing the scars of the Micro- 
soft vs. CORBA days, is a tough job for IT 
managers. But it’s an essential one. The 
benefits of creating a service-oriented ar- 
chitecture are too great to ignore. Lower- 
cost apps that are deployed more quickly 
could help you gain a competitive advan- 
tage if you do SOA right. 

Doing it right means convincing your 
developers that their careers are enhanced 
when they apply SOA thinking to their 

day-to-day work. Helping to alter their tried-and-true 
ways of thinking about building software isn’t going to 
be easy. But it’s essential. 

To help steer this change, you’ll need a softer touch 
than the one my dinner companion’s boss uses. You 
need to be persuasive. Meet with members of your 
application development team to discuss the benefits 
of SOA. Don’t criticize their current or “old” way of 
doing work; simply explain the advantages of SOA to 
them. Tell them how the SOA style can raise the pro- 
file of the IT department and enhance their careers. 
Explain to the cynics that this time, Microsoft can’t 
beat back the SOA movement. 

Do it calmly, consistently and enthusiastically, and 
you will win them over. @ 55602 
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IT Careers: Diversity Efforts Focus on Respect 


As the 27th annual National Black Data 
Processing Associates Conference gets underway 
this week in Detroit, corporate America is showing 
signs of maturing in terms of its views of Diversity. 


Two to three decades ago, forward-thinking 
businesses providing training and 
development programs designed to create 
understanding among races, primarily among 
African-American and Caucasian employees. 
Today's corporations are focused on demanding 
respect for individuals who may differ in ethnicity, 
but also in background, age, education and culture, 
regardless of race. This year's BDPA Conference 
reflects the shift with a theme of “Driving 
Innovation, Bringing Value and Embracing 
Change” — a theme fit for any individual. The 
conference offers career coaching and a programming 
contest that allows IT professionals to flex their expertise 
on new Java tools developed by Compuware. 


were 


Pat Smith, Vice President of Information Technology at 
MasterCard, was on the company’s first Diversity Council 
almost a decade ago. “It was great to be a pioneer,” she 
says. “Ten years ago we talked about gender or race 
when we talked diversity. The focus now is on cultural and 
ethnic backgrounds. Here at MasterCard we have people 
who may look the same as an east coast Anglo but whose 


backgrounds bring a completely different view and 
perspective. The makeup of our (diverse) quilt, if you will 
is no longer just visually diverse.” 


it's an important and strategic difference for 
MasterCard, which operates worldwide and moves 
employees throughout that network on a proactive 
basis. “During my time with MasterCard, I’ve had the 
opportunity to live in Canada and manage a global 
team. The global team spoke 15 different languages. 
Currently, | manage a team of people who speak eight 


Great companies reflect great people. 


At HSBC - North America, our drive to provide the best in personal finance services, 
consumer finance, commercial banking, private banking, corporate investment banking 
and markets has made us one of the world’s largest banking and financial services 
organizations. And with people like you on our team - those inspired to make success a 


reality - 


we will continue to lead the industry and remain one of the world’s most 


admired companies. If you would like to play an important role within our dynamic 


organization, explore our current openings 


INFORMATION TECHNOLOGY PROFESSIONALS 


What you need for success: 

* Bachelor's degree or equivalent 
+ High energy 

* Self-motivation 

* Prior related working experience 


What you'll get 

+ Market-competitive compensation 

+ Full medical/dental/life insurance 

* Industry leading 401K with match 

* Tuition reimbursement 

* Discounted employee stock purchase plan 


Interested candidates, please apply online at: www.joinhsbeusa.com HSBC is an equal 


opportunity employer committed to workforce diversity 


HSBC <> 





CW08150SE/MW/W.1 


languages,” says Smith, whose organization 
creates the systems used to operate MasterCard’s 
financial services (the back office), says she is 
particularly focused on hiring as part of her 
diversity efforts. “We need to make sure people 
coming through our door are those who have 
respect for others who look, think, and act in ways 
that are different from their own.” 


It's an imperative coupled with Smith's challenge 
to be first-to-market with innovation that helps 
MasterCard attract and retain customers. “What 
we're finding with that pressure to stay ahead is that 
we need research and development, the ability to 
ramp up and down on projects. We need people who 
can make this happen.” 

MasterCard has more than 2,000 information 
technology professionals, or about half the employee 
base. Some work on innovation of new products, such as 
PayPass (a no swipe, sensor-based credit card), while 
others work with Smith on enabling those technologies 
through ever-faster financial applications. 


For more information about IT Careers 
advertising, please call: 800.762.2977 


Produced by Carole R. Hedden 


mastercardintl.com/careers 
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“Come build the cc 


Fred Hassan, CEO Schering-Plough 


Our plans for tomorrow are as bold as yours. Schering-Plough has new drugs on the horizon, new partnerships and a renewed dedication to leadership, values and hard work 
the same qualities that made us an industry leader for decades. Each day, we grow our relationships and establish the trust of doctors and patients alike, while providing 
them with a steady flow of the most innovative and effective science-based medicines and services 


The award winning Schering-Plough Global information Technology group leads the efforts to plan, select and implement technology solutions and services that enhance the 
productivity of our colleagues who discover, produce, sell and distribute Schering-Plough Products 


As we strive to achieve these goals, our commitment to building a diverse, global, highly skilled workforce has become even stronger, with performance driven incentives, 
leading-edge training and development, and excellent opportunities for professional advancement. “We are building a new and special kind of healthcare company. The 
change, the excitement, the opportunity are infectious.” 


As part of the New Schering-Plough team, you'll benefit from strong leadership, a new vision and an empowering corporate culture... while enjoying a very competitive 
compensation and benefits package. For more information and to apply, visit: www.schering-plough.com/ careers. 


We value the diversity of our global workforce. We are an equal opportunity employer. 


Schering-Plough 


Assistant Director of 
Public Social Services 
(Technical Services) 
$106, 403 - $159,604 Annually 


OUR PEOPLE MAKE THE 
Difference wavmart ...... 


We’re Looking for the Future Leaders of Tomorrow 


Ready to do it all? Candidates interested in joining 
our team should forward a resume to: 


Our excellent benefits package includes medical, retire- 
ment plans, 401k/457, & more 


Here is your opportunity to manage the design, develop- 
ment, implementation, operation, & maintenance of multi- 
ple complex info systems. 


Requires a BA/BS or higher in IT, CS, Public or Business 
Admin, Management, or Economics AND three years of 
extensive and progressively responsible experience man- 
aging technical info systems functions & administrative 
functions in a large public or private sector organization 


Wal-Mart Stores, inc. has been recognized by 
Fortune Magazine as the most admired company in 
the world. As our company continues to expand, so 
does the opportunity for first-class, talented people to 
guide the future of one of the most successful and 
innovative growth companies in the world. 


Wal-Mart Information Systems Division 
Attn: Recruiting Department 

805 Moberly Lane M41 

Bentonville, AR 72716-0560 

E-mail: ISDADS@wal-mart.com 


For more info or to apply, call 
(213) 738-2021 or visit 
http://dhr.lacounty.info 

(click on Job Information, then 
Executive Positions) 


kines 


Put your career on a fast climb and help us continue to 
set the industry standard in information technology. 
For more information, 


visit our Web site at: County of Los Angeles 


* UNIX - C, C++, Administration, Engineering, 
e e An Equal Opportunity Employer 


Informix DBAs 

* Windows - Clients/Servers - VB, VC++, Java, 
ASP, XML 

* IBM Mainframe - COBL, CICS, DB2 and IMS 
DBAs 

* Networking - Ethernet, VSAT, Frame Relay, ATM 

* Telecommunications 


All positions are located in Bentonville, AR. 


www.walmartstores.com 


Wal-Mart ts An Equal Opportunity Employer. M/F/D/V 


°2005 Wal-Mart Stores, inc. 
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Sr. Systems Eng: Lead and 
supervise configuration, de- 
bug, upgrade and resolve 
Windows, Linux, Unix OS 
issues. Develop, integrate 
databases, document man- 
agement systems, Web appli- 
cations, Sitewand preferred, 
Oracle DBA tasks, shell/peri 
scripting, PL/SQL. Exp in 
Java/HTML, Oracle, IIS, 
Apache. M.S. in Computer 
Science, 2 yrs exp. 40 hrs/wk. 
Send resume to: C. Mizuno, 
Compex Legal Services, Inc, 
325 Maple Ave, Torrance, CA 
90503. 


Software Engineer, Ap- 
plications utilizing C++, 
Oracle RDBMS, UNIX 
to work in various loca- 
tions in the Bay Area. 
Resume to Customer 
Care, 2278 Camino 
Ramon, Suite 14, San 
Ramon, CA 94583 or 
boucher@customer 


resolutions.com. 
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oUsTormners 


Ware 
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employees 


As far as business models go, ours is pretty simple. 


At U.S. Cellular®, we treat our customers the way we want to be treated - with respect, appreciation and loyalty. We understand that in 
order to keep our customers, we must to do everything in our power to make their experience with us a rewarding one. 


The same holds true with our own associates. As an Information Systems or Engineering Professional with U.S. Cellular, you will discover 
a diversified group of skilled professionals who all share one thing in common: an uncompromising commitment to do whatever it takes to 
make the customer experience satisfying - and to enjoy a career experience just as rewarding. 


If you're looking to join an organization that cares as much about associate satisfaction as it does its customers’, take a good look at 
U.S. Cellular. To explore all of our current Information Systems and Engineering positions, please visit: www.uscellular.com today. EOE. 


K US. Cellular 


e connect wiin 


www.uscellular.com 
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aetna eS 


See Yourself at @ 


See a career where you: 
) ' 


ants t sve and 


See yourself in one of these careers: 


Manager 


get Technolo 


hnical Architect 


ical Architects a 


ructure 


analySiS 2SIGN aNd IT 


e Target Technology Sen 


Dur teams 
3, track mil 


d risks. They provide 


ams people I 
ed both their 


york with clients 
related to 
achnical expertise 


f enterprise-wide business applications for 


As a Team Member, receive one of the best compensation packages 


anywhere including: 
© Competitive pay e | 


persona 


isit: Target.com/careers 


TARGET. 


Programmer Analyst; Mineola 
(NY): Analyze, design, develop 
applications for Web, eCommer- 
ce, Enterprise Content Manage- 
ment solutions using Java, Java 
based tools; J2EE, RDBMS 
DB2, Oracle, Sybase, SQL Ser- 
ver, C++ in multiplatform envi- 
ronment. Work with Application 
Servers. Test Internet applica- 
tions, resolve quality assurance 
issues, troubleshoot and main- 
tain existing applications. Work 
with programmer analysts and 
team of software engineers 
Reply: Fatwire Corporation, 330 
Old Country Road, Mineola, NY 
11501 


Systems Analysts: An- 
alyze, develop and test 
ERP, Enterprise Portal, 
J2EE, JSP, XML using 
database in Oracle and 
DB2. Reg. Bachelor in 
Comp. Science or Engg 
Or related and 2 yrs of exp. 
Send resume to: KMD 
Global LLC. 10000 W 75th 
St., Ste., 108, Shawnee, 
KS 66204 or E-mail 


info@kmdglobal.com 


Software Engineers: IT consult- 
ing comp seeks s/w engineers 
for its clients nationwide w/exp 
in SDLC, architecture, proto- 
typing, product dev, deploy- 
ment, performance tuning & 
dev of n/w security appi/EAI in 
+ UML, XML, RDBMS, GiS 
NET, DLL & Assembly Dey, 
Win/Unix 
* Seebeyond, Java, J2EE, SQL 
Server/Oracle, Shel! Scripting 
& Unix 


Send resume to: HR Resource 
Logistics, Inc., 499 Ernston 
Road, Suite # B12, Parlin, NJ 
08859 


Software Consultant - 
NY, NY & other US 
locations as required. 
Design, program, & 
test banking s/w sys- 
tems. Universe Basic, 


Segundo, CA 90245. 


idays ® Tuition reimbursement ¢ Target discount 


Programmer-Analyst needed 
at unanticipated US client 
sites to create, dvip & main- 
tain web-based applics accdg 


incl MSSQL, 
Tomcat, Weblogic 
DHTML, JavaScript, CSS, Hi- 
bernate, Dreamweaver, Pho- 
toshop & Eclipse. Resume to 
Global Consultants, Attn 
Hireme, 25 Aijrport Rd 
Morristown, NJ 07960 


Software Engineering Mgr. in 
Hauppauge, New York to 
manage design, development 
and implementation of wire- 
less CDMA telecommunica- 
tions software. Requires M.S 
in Computer Science or Com- 
munications Engineering and 
3 yrs. exp. as Wireless Tele- 
com. Software Engineer; or 
B.S. and 5+ yrs. exp. Compet- 
itive salary and benefits. Send 
resume to Telular Corpora- 
tion, 647 N. Lakeview Park- 
way, Vernon Hills, IL 60061, 
ATTN: Job Code SEM101 
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Find out how to get the most out of 
your job search and your career. 


Computerworld’s 
Careers Knowledge 
Center 


Get the latest industry news, as well 
as valuable job- seeking and career 
enhancement advice. 


Read about IT-related issues such as: 
Hiring/recruiting 
Education/training 
Consulting/contracting 
Skills 


Remember, knowledge is power, 
and the Careers Knowledge Center 
is the place to get it! 


Go to www.computerworld.com today. 
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Opportunity 
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for fresh job listings 
placed by top 
companies 
looking for skilled IT 


professionals like you! 
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Programmer Analyst: De- 
sign & develop client-serv- 
er application using Oracle 
91 & J2EE with BC4J & 
OC4J components & cus- 
tomize new products. Req 
Bachelor's in Comp. Sci- 
ence. Or Engg. & 2 yrs of 
exp. Send resume to H.R 
Yashoda Systems, Inc 
7100 Regency Square, Ste 
230-4, Houston, TX 77036 
E-mail: resumes: 
systems.com 


Web Developer needed w/Bach 
in Graphic Desi or Engg. or 
Comp. Scie. & 2 yrs exp to des- 
ign, develop & me ain web ap- 
plications using - VBScript 
Visual Basic, Javascript, Java 
HTML, CSS & Microsoft Visual 
Studio. Write data transforma 
tion scripts using ndows 
Scripting Host & VBScript. Con- 
vert SQL/T-SQL queries to PL 
SQL stored prc res & Java 
code. Deploy & ain in 
Microsoft |i 

as Programmer Analys' 
ceptable. Mail res to: Pratima 
Inc 156 Jericho Tt ike 
Floral Park, NY 11001 joca- 
tion: Floral Park, NY 


Analyst/Developer - Goldman 
Sachs & Co., New York, NY 
Analyze, plan, design, deve 
test, impler & suppc 
tems. Requirements: B. alors 
in Comp Sci, Engineering or 
related field & 1 yr exp in job 
offered or as a Systems Analyst 
Exp must incl utilizing Java 
z SQL & Sentinel and 
Jata reconciliation 
solutions. Job Code: TECH- 
061905AD. Apply: https 
mansachs .recruitmax n 
candidates using 
Profile" option. Can 
provice salary r 
“Target Compensation” field & 
specify job de Specific 
Type” field. NO PHONE CALLS 
PLEASE 


Systems Analyst: NYC, NY 
Neotecra a software consult- 
ing Co.has openings for expd 
prof to develop & analyze biz 
apps & assist in full life cycle 
proj w/Oracle Portal using 
Eclipse, Jdeveloper, XML 
XSLT in heterogeneous envi- 
ron. Integrate ADF & Struts 
framework & migrate ASP to 
J2EE environ. Set up apps 
server w/SSO & OID. We offer 
compi salaries and a prof'l 
work environ. For immed con- 
sid send resume to: Neotecra 
Inc., 90 John St.5th Fl, NY, NY 
10038, Attn.: HR Dept 


DISCOVER: Something Better. 


Work in IT.” 


by Computerworld as 


alee b weles es 





It’s time to celebrate... 


«We have been recognized for three consecutive years 
one of the “Top 100 Best Places to 


Work for a financial leader in one of the following 


available positions: 


To apply and learn more, please go to our career website at: 


DISCOVER 


FINANCIAL SERVICES 


Software Engineer/Developers 
Web financial modules develop- 
er. Design and develop financial 
point-of-sale application system 
web pages building & deploying 
systems integration modules 
and service. Develop web- 
based applications software 
Tools: C+, VC++, VB 6.0 Visuai 
FoxPro 6.0, SQL Server and 
ASP.Net, JSP's, Serviets, EJB's 
and XML 


Oracle financial modules devel- 
oper. Customize oracle financial 
modules, including account r/p. 
Design and implement data load 
interface and integrate different 
Oracle financial modules with 
Retake RMS, RDM and 3000 
POS nationwide. Define stan- 
dards, procedures for systems 
development 


Req. Master's of CS w/1 yr. exp. 
Send resume to R. Telinski, 100 
S. Wacker Dr., Ste. 200, Chica- 
go, IL 60606 


ATTENTION: 


eT Sa DUS Cam EDU Ca a 


Contact 
800-762-2977 


Place your Labor 
Certification ads here! 


Are you frequently placing legal or immigration advertisements? 


Let us help you put together a cost effective program that will make 
this time-consuming task a little easier. 


IT|Careers 
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SYSTEMS ANALYST 


Analyzes user require 
procedures and probiems 
automate processing or to 
improve existing computer sys- 
tems. BS or Engg or math- 
related and 2 yrs. exp. in job 
offered. Must be able to travel 
Incl. in the 2 yrs., must have 2 
yrs. exp. with various computer 
skill sets such as: WinNT/2000 
XP, OS/390, UNIX, MVS. 
Studio.NET, C#, VB.NET. 

NET, ADO.NET, Visual 
5.0/6.0, ASP 2.0/3.0, ADO, C 
C++, DHTML, XML XSLT 
XPATH, Web Services, COM 
DCOM, IIS 5.0/6.0, MTS, Crystal 
Reports, Business Objects 
UML, MSMQ, BizTalk Server 
2004, Share Point Portal Server 
2003, SQL Server 2000/7.0 
TSQL, Oracle 7x/8i/9i, PL/SQL 
DB2, WinRunner, LoadRunner 
Hrs./wk. 9 to 5, Mon-Fri; No 
overtime. $57,450/yr. Apply res- 
ume to Attn: HR, Nagesh Ganta 
Capricorn Systems, Inc. 3569 
Habersham-at-Northlake, Build 
ing K, Tucker, GA 30084 


Programmer Analyst needed 
w/Bachelors in Engg. or Comp 
Scie. or Economics & 1 yr exp 
to analyze, develop & program 
the code for web sites using 
Java Web Start, XML, Inter- 
media & the Apache Web 
Server. Utilize the Rapid Appli 
cation Development (RAD) 
methodology in a Joint Applica- 
tion Development (JAD) setting 
Define & specify the application 
needs. Mail res to: Algomod 
Technologies, Corp., 116 John 
St., Suite 1406, NY, NY 10038 
Job location: NY, NY. 


Software Development Engineer 
le, FL. Req. Mas. 


ih Windows pro 
gramming u' C++, VC++ & 
C#.NET; security protocols; mul 
tithreaded design: & ASP.NET 
Must pass ¢ ny's technical 
Jesign & de- 


velop key ele nts of advanced 


review. Rese 


multi-user software se 
plications based on ws 
NT/2000 or web technology us 
ing a thin-client wser archi 
tecture. Design & di p Install 
programs with advan 
uration capabil 
releases HZING v 
C#.NET, ASP.NET, network pi 
tocols, security protocols & 
tithreaded design. Forward res. 
ume by e-mail to citrixrecruiting 
@citrix.com 
Systems, Inc., 851 W. Cypress 
Creek Road Lauderdale, FL 
Ref e job code 
61A in subje f e-mail or 
written resp e. EEO/AA 


mployer 


COMSYS 


With 35 branch offices locat- 
ed across the US, COMSYS 
is actively recruiting Soft- 
ware Engineers for mutlipie 
job openings. Currently we 
have positions available 
within the metro LA, CA 
area. Roving employment to 
varying jobsites throughout 
the US. Please refer to job 
code LA100 when submit- 
ting resumes to: COMSYS. 
Attn Nancy _ Theriault 
15455 N. Dallas Pkwy., Ste 
300, Addison, TX 75001 
EOE/MF/DV. 
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Continued from page 1 


Mainframes 


The vendors involved in 
these projects — Dell Inc., 
which supplied the servers to 
Welch Foods, and IBM, which 
supplied Baldor — announced 
the migrations last week. 

Mark Shackelford, Baldor’s 
IT director, had three main- 
frames and eight Unix servers. | 
Late last year, the company 
decided to consolidate to one 
new mainframe, the z990, run- 
ning Linux and z/OS operat- 
ing systems and using zSeries 
virtualization technologies. 

Weighing heavily in support 
of the mainframe was its track 
record: There hadn’t been any 
mainframe downtime since 
1997, said Shackelford. The 
ERP applications run the busi- 


Continued from page 1 
Energy Bill 


ability Council, said Ellen 
Vancko, a spokeswoman for 
the organization. The NERC is 
a Princeton, N.J.-based volun- 
tary organization that sets 
standards for the operation 
and planning of the nation’s 
bulk electricity system. 

A spokeswoman for the 
FERC was unable to confirm 
the agency’s plans last week. 

The NERC is developing cy- 
bersecurity standards [Quick- 
Link 54536] that cover areas 
ranging from the security of 
critical cyber assets to person- 
nel screening and training re- 
quirements. The standards, 
known as CIP-002 to CIP-009, 
have been in the works for the 
past two years. 

Executives from electric util- 
ities and independent system 
operators (ISO), which oversee 
regional power grids, recently 
submitted comments on the 
third draft of the cybersecurity 
standards, said Laurence W. 
Brown, director of legal affairs 
at the retail energy services di- 
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gle combined issue for the last two weeks in December by C 
nn Arbor, Mich. 48106. Computerworld is in 


ness, manu- 
facturing, fi- 
nance, sales, 
distribution 
and Web ap- 
plications, 
among others. 
“We have a 
very stringent 
requirement 
of being up all 
the time,” he 
said. 

The move 
to the mainframe was com- 
pleted in June and has in- 
creased performance by 40%, 
Shackelford said. The cost of 
the z990 was offset through 
staff reductions; the main- 
frame/Unix management staff 
was cut from eight to three be- 
cause Unix servers were elim- 
inated, so he now has an IT 
staff of 38. 


SIP \e (ama) ci8) 
says Baldor 
hasn't had any 
CO um 
TP e us) 
since 1997. 


tute Inc. in Washington. Brown 
said a fourth draft of the stan- 
dards is expected to be voted 
on this fall. 

If the standards are ap- 
proved by NERC members 
and the group’s board, they 
will likely go into effect next 
spring, said Brown. That 
should give power companies 
enough time to craft budgets 
that address the new require- 
ments and create a list of 
physical and cyber assets that 
will be audited by the new reli- 
ability organization being es- 
tablished by the FERC, he said. 


Listing Assets 

The biggest challenge for 
power companies in meeting 
the upcoming standards, said 
Brown, is the creation of a 
list of physical and cyber as- 
sets that need to be audited 
each year. 

“The most difficult issue is 
being able to demonstrate that 
you have looked at all of the ar- 
eas that need to be tested and 
{are] doing the work neces- 
sary,” said Brown. 

For instance, Southern Co. 
identified its critical assets af- 
ter the 9/11 terrorist attacks in 
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IT spend- 
ing has de- 
clined from 
1.7% of sales 
to 1.2%, and 
Shackelford 
said he ex- 
pects addi- 
tional reduc- 
tions. 

Three years 
ago, Shack- 
elford had 
investigated 
migrating to a Windows server 
environment with cluster fail- 
over. “We thought we were go- 
ing to save a ton of money,” but 
the systems crashed all the 
time, he noted, and the idea 
was quickly abandoned 

Larry Rencken, vice presi- 
| dent of information services 
at Welch Foods, joined the 
company in June, when the 


RENCKEN 
eR let) 
took Oracle's 
advice on its 
Nilatrlrcct te) 
Biel 


the U.S., but it will now have to 
put together a different list to 
address cyber assets, said Bob 
Canada, a business assurance 
principal at the Atlanta-based 
super-regional power company. 
While there may be some 
overlap with its post-9/11 asset 
management efforts, the new 
requirements will demand “a 
significant effort” to implement 
effective security controls for 
some of Southern’s facilities, 
he said. For example, the com- 
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path was already set, but it’s 
one he supports. 

Welch’s decision to adopt 
the Intel platform with Oracle 
and a virtualized environment 
using VMware was heavily in- 
fluenced by the vendor’s rec- 
ommendation, as well as Ora- 
cle’s example of running on a 
Linux and Intel environment 
itself, said Rencken. 

Welch Foods has 100 physi- 
cal Intel servers virtualized to 
200. Rencken said he likes be- 
ing able to add servers as need- | 
ed for performance and scale, 
as well as building “on a foun- 
dation with common processes 
that have been streamlined and 
fully integrated.” 

Jacob Matusevich, Welch’s 
manager of networks and 
server technologies, said 
there’s no significant differ 
ence in uptime between the 


pany might need to restrict 
workers’ access to portions of 
a computer console or an area 
of a power plant to ensure that 
those employees’ actions are 
authorized, he said. 

“When we built these 
things way back, I’m sure they 
weren't designed for cyber- 
security; they were built to 
comply with the needs of the 
plant,” said Canada. 

PJM Interconnection LLC, an 





ISO that serves 51 million elec- 
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Intel and IBM environments. 

Rencken has an IT staff 
of 50, but that includes what 
he described as a short-term 
increase, because he is still 
supporting two environments. 
The migration project will 
continue into 2007. He put 
IT spending at about 2.5% of 
revenue, but that reflects the 
transition costs and expan- 
sion of Oracle-based appli- 
cations to replace paper- 
based processes with auto- 
mated ones. 

Charles King, an analyst at 
Pund-IT in Hayward, Calif., 
wasn’t surprised by the differ- 
ence in approach taken by the 
two companies. “I think from a 
customer standpoint, the world 
is much more made up of 
shades of gray, and at the end 
of the day, each customer is a 


unique case.” @ 56159 


tric customers from North Car- 
olina to New Jersey, has been 
tracking its cyber assets since 
March 2004 in compliance 
with 1200, the previous cyber- 
security standard, said Tom 
Bowe, chief security officer at 
the Valley Forge, Pa.-based 
company. “I don’t want to bait 
anyone, but I do feel confident 
in our level of security,” said 
Bowe. Still, he added, “day to 
day, that confidence can ebb 
and flow with the latest threat 
that’s been published.” 

Midwest Independent 
Transmission System Opera- 
tor Inc. in Carmel, Ind., al- 
ready identifies and monitors 
its cyber assets through an 
SAS 70 audit, said Jim Schins- 
ki, vice president and CIO at 
the nonprofit organization, 
which serves the electrical 
transmission needs of much 
of the Midwest. 

The regional grid operator 
has hired third parties to try to 
hack into its systems twice 
during the past two years, said 
Schinski. “We came out of the 
report in very good shape,” 
Schinski said, declining to dis- 
cuss the vulnerabilities that 
had to be corrected. @ 56178 


10 NSA 7C9. 


hased on 


»pies) and 
717) 399-8900. Web 
entrai & So 


America 





50 COMPUTERWORLD August 15, 2005 


_THE BACK PAGE 


FRANK HAYES # FRANKLY SPEAKING 


Messy [raining 


OW DO YOU TRAIN USERS? No, that’s not an abstract 

question. How do you train users? There are two basic 

approaches. In the first, you start by showing the 

users all the features of the new system and then 

eventually demonstrate how they can do the specific 
things they’ll need to get real work done. 

The second way is to start by showing users how to do their work 
with the new system and only later point out the rest of the features 
that are available somewhere in the software. 

Or to put it another way: You can focus on your work, or you can 
focus on their work. Which approach will work better? 


You know the answer. Showing off features is 
fun for IT people. But hearing about features is 
mostly useless to users unless it’s in a context. 
That context doesn’t exist until users have 
walked through the standard processes they’ll 
be using this software for. Until they’ve tried it, 
they can’t really make sense of those features, 
no matter how great they are. 

So why do we keep training users the wrong 
way? Sure, we’re proud of our work. We like fo- 
cusing on that. But IT people are also orderly. 
We like having an agenda for training and cov- 
ering everything on that agenda. 

We know that if we start with a lecture on 
features — say, by showing users every item on 
every drop-down menu and explaining what 
each one does — and enforce a hold-all-ques- 
tions-until-the-end policy, we'll stay on sched- 
ule. We'll frog-march users through the feature 
list, but we'll fit it all in. 

And we'll waste that first hour or so of the 
users’ time. After all, they won’t remember any 
of that stuff. We’ll just end up explaining it 
again on the help desk — one call at a time. 

But what happens if you begin by 
walking users through a typical 
transaction — or better still, by let- 
ting them walk you through a trans- 
action? Then your orderly agenda 
rapidly dissolves into chaos. Some 
users will figure out the system im- 
mediately. Others won’t and, be- 
cause you can’t afford one trainer 
per user, they’ll do what users do — 





They'll get confused. They’ll ask questions 
you never thought of. Things that aren’t config- 
ured quite correctly will quickly surface. Every 
misunderstanding that you had about the users’ 
work, and that they had about your instruc- 
tions, will become apparent. 

Sounds like a mess, doesn’t it? But it’s exactly 
the mess you need. 

Because that’s your opportunity to answer 
those questions and clear up those confusions 
— ina consistent way for all the users. 

It’s also your chance to let users design a 
cheat sheet for the system, right there on the 
whiteboard with you. From that, users will get 
the most useful quick-reference documentation 
possible. And IT will get the real story on what 
users actually do with the software’s features — 
what works well, what’s kludgy, what needs fix- 
ing fast, what can be left for later. 

And you'll be able to see who the ringleaders 
are among your users, the experimenters, the 
ones who fear any change and the ones who 
just aren’t very quick. Keep track. Take notes. 
You'll learn who your best friends and worst 

problem children will be. 

This kind of training won’t be or- 
derly or tidy. You won't get through 
your whole agenda. In fact, you’ll 
likely send those newly trained 
users out wondering about all 
those features you didn’t have time 
to talk about and whether those 
features will really be useful in do- 
ing the work. 
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Sarcasm Will Get You Nowhere 


When this user's hard drive dies, pilot fish tells her it 
will take about 30 minutes to set her up with a new 
drive. “Maybe | should just drop this thing on the floor 
next time it doesn’t work,” user grumbles. “If you think 
that'll help,” fish jokes. Fast-forward: “Today, | get a 
call,” says fish. “Her computer wouldn't boot, so’she 
dropped it on the floor. Somehow she managed to 
short out the power distribution for her whole line of 
24 cubes. Now her supervisor wants to know why | 
would suggest something like this.” 


Hot Idea 


This computer SHARK 
TANK. 


; Share with the world,” 
: “His response? ‘See? | 
: knew I needed a bigger 
? hard drive!”” 

run at the same time as: aii 
: Anyone Listening? 
: Help desk pilot fish is 

: troubleshooting a PC 

: with a user and the PC 
: vendor's support line on 
: a conference call. Fish 
? explains that the PC is a 


room is served 
by two air con- 
ditioning units, 
a primary and a backup, 
reports a pilot fish who 
works there. But after 

more servers are added, 
the backup starts being 


the primary to handle 
the extra heat. Then 
summer arrives, and 
suddenly both cooling 
units are overheating. 
What's wrong? “The 
compressors had been 


installed on the roof with : 
: initially turned on, it 

: started to smoke. Now it 
: won't turn on at all. Ven- 
i dor’s tech: “OK, turn the 
: machine on.” Fish: It will 
: not turn on! Tech: “OK, 
? turn the computer off.” 
: Not Normal 

: The Internet isn’t work- 
: ing on my new comput- 
} er, Sales guy tells IT pilot 
: fish. Fish is puzzled; he 
: just spent a day dupli- 

: cating the sales guy's 

: old setup and testing 


their exhaust fans facing 
each other,” sighs fish 
after investigating. 
“They were blowing hot 
air on each other.” 


So Helpful 


his own hard drive one 
Friday to save sysadmin 
pilot fish the trouble. 
“Please leave your com- 
puter on over the week- 
end so the IT security of- 
fice can push updates to 
your box,” fish tells him. 


boss is panic-stricken - 
nctilindincidhii aaa 


the new 10GB hard drive 
is completely full. “Since : 
he was so helpful in set- : 
eee) : 


way, by 8 a.m. Monday, 


hosted over 
9GB of MP3 
files on his 
very own Nap- 
ster server to 


fire hazard; when it was 


HERE, IT ALWAYS SAYS SHARKY. Send me your 


turn to other users for help. 
Meanwhile, a different group of 
users will start experimenting, look- 
ing for ways to use the new system 
to do the things the old system did. 


faite Wits, Cooler In other words, they'll end up fo- 
world’s senior news colum- | Cused on both their work and your 
nist, has covered IT formore work. 
than 20 years. Contact him at And isn’t that the kind of train- 
ing you wanted anyway? @ 56137 


true tale of IT life at sharky@computerworld.com. 
You'll get a stylish Shark shirt if | use it. And check out the 
daily feed, browse the Sharkives and sign up for Shark Tank 
home delivery at computerworld.com/sharky. 
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Need Peer Advice on 
Reducing IT Complexity? 


Find Proven Strategies at Our Complimentary; 


8:15am to Noon * September 29, 20 


Conquering IT Complexity 

Consolidation and Integration 

Strategies for Creating Competitive 

Advantage 

* Services-oriented Architecture 

* Web Services 

* Pruning Redundant Software 

* The “Virtual” Enterprise, Virtual Servers 
and Grid Computing 

* Simplifying Security 

* Incremental Innovation Through 
Data/Application Integration 


To apply for complimentary registration: 
* Visit www.premier1 00.com/regional 
* Or call Chris Leger at 888-299-0155 


“Complimentary registration is limited to qualified 
IT end user professionals. 
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Half-day Conference 


yatt Regency Scottsdale * Scottsdale, Arizona 


a 


Summit Agenda 


8:00am — 8:30am 
8:30am — 8:40am 


8:40am — 9:15am 


9:15am — 9:45am 


9:45am — 10:15am 


10:15am — 10:45am 
10:45am — 11:15am 


11:15am — 11:45am 


11:45am — 12:30pm 


12:30pm — 2:00pm 


2:00pm 


Registration and Networking Breakfast 


Welcome and Opening Remarks 
Julia King, Executive Editor and National 
Correspondent, Computerworld 


. 4 Numbers Don't Lie: Benchmarking 
Data Proves That Reducing IT 
Complexity Cuts Costs Across Other 
Business Functions 
Allan Franx, President & Chief Technology Officer, 
Answerthink, Inc. and Senior Hackett IT Fellow 


E Project Virtual Gateway: 
= Streamlining Health Services Delivery 
in Massachusetts 
Louis Gutierrez, Chief Technology Strategist, 


Commonwealth Medicine, University of 
Massachusetts Medical School 


Update: State Street's Infrastructure 
Efficiency Program 


Madge Meyer, Executive Vice President, Global 
Infrastructure Services, State Street Corporation 


* 


Networking Break 


Negotiating Services-Oriented 
Contracts 
>» 


Dan Demeter, Chief Information Officer, and 
Senior Vice President, Korn/Ferry Internationa 


Virtual Enterprises and Simplification 
Damien Bean, Co-founder, CareerCurrency LLC 


and former Chief Information Officer, Hilton Hotels 


Panel Discussion: 

Reducing IT Complexity 

Moderator: Don Tennant, Editor in Chief, 

Computerworld 
Panelists: Damien Bean, Co-founder, CareerCurrency 
LLC and former Chief Information Officer, Hilton Hotels; 
Dan Demeter, Chief Information Officer, and Senior Vice 
President, Korn/Ferry International; Allan Frank, President 
& Chief Technology Officer, Answerthink, Inc. and Senior 
Hackett IT Fellow; Louis Gutierrez, Chief Technology 
Strategist, Commonwealth Medicine, Uni ty of 
Massachusetts Medical School, Madge Meyer, EVP, 
infrastructure Services, State Street Corporation 


Networking Lunch 
Program Concludes 





To sponsor, call Leo Leger at 508-820-8212. 
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HP PROLIANT BL20p G3 BLADE SERVER 
with ProLiant Essentials Management Software 


60GHz/2MB) ~, 4 5 7 
The HP ProLiant BL20p G3 blade server with the Intel” Xeon™ Processor simplifies server management 


SMART ADVICE > SMART TECHNOLOGY > SMART SUPPORT 


Call 1-866-356-6090 


Click hp.com/go/bladesmag3 
Visit your local reseller 








